| Current Path : /var/node/inatote/Inatote-Backend/helpers/ |
| Current File : /var/node/inatote/Inatote-Backend/helpers/admin-verify-middleware.js |
import config from '../config.js'
import jwt from 'jsonwebtoken'
export default function adminVerify(req, res, next) {
//console.log("cookies" , req.cookies);
let accessToken = req.cookies.token;
//console.log("accessToken", accessToken);
// const authHeader = req.headers.authorization;
//if there is no token stored in cookies, the request is unauthorized
if (!accessToken) {
return res.redirect("admin/login");
}
// let accessToken = authHeader.split(' ')[1];
// //console.log(accessToken)
let payload
try {
//use the jwt.verify method to verify the access token
//throws an error if the token has expired or has a invalid signature
payload = jwt.verify(accessToken, config.app.secret)
req.user = payload.data;
if (req.user.userType != "Admin") {
return res.redirect("admin/login");
}
//console.log(req.user);
next()
}
catch (e) {
//if an error occured return request unauthorized error
console.log("err" , e);
return res.redirect("admin/login");
}
}