37 lines
686 B
JavaScript
37 lines
686 B
JavaScript
require("dotenv").config();
|
|
const jwt = require('jsonwebtoken');
|
|
|
|
const jwtKey = process.env.JWT_SECRET;
|
|
|
|
module.exports = {
|
|
authenticate,
|
|
generateToken
|
|
};
|
|
|
|
function authenticate(req, res, next) {
|
|
const token = req.get('Authorization');
|
|
|
|
if (token) {
|
|
jwt.verify(token, jwtKey, (err, decoded) => {
|
|
if (err) return res.status(401).json(err);
|
|
req.decoded = decoded;
|
|
next();
|
|
});
|
|
} else {
|
|
return res.status(401).json({
|
|
error: 'No token provided, must be set on the Authorization Header',
|
|
});
|
|
}
|
|
}
|
|
|
|
function generateToken(user) {
|
|
const payload = {
|
|
username: user.username
|
|
};
|
|
|
|
const options = {
|
|
expiresIn: '3d'
|
|
};
|
|
|
|
return jwt.sign(payload, jwtKey, options);
|
|
} |