| Current Path : /var/node/inatote/Inatote-Backend/helpers/ |
| Current File : /var/node/inatote/Inatote-Backend/helpers/vendor-verify-middlerware.js |
import config from '../config.js'
import jwt from 'jsonwebtoken'
export default function vendorVerify(req, res, next) {
// //console.log(req.cookies)
let accessToken = req.cookies.token;
console.log("accss", accessToken);
// const authHeader = req.headers.authorization;
//if there is no token stored in cookies, the request is unauthorized
if (!accessToken) {
return res.redirect("vendor/login");
}
// let accessToken = authHeader.split(' ')[1];
// //console.log(accessToken)
let payload
try {
//use the jwt.verify method to verify the access token
//throws an error if the token has expired or has a invalid signature
payload = jwt.verify(accessToken, config.app.secret);
console.log("payload" , payload);
req.user = payload.data;
if (req.user.userType != "Vendor") {
return res.redirect("vendor/login");
}
next()
}
catch (e) {
//if an error occured return request unauthorized error
return res.redirect("vendor/login");
}
}