added roles with checking in middleware

- still need signup for orgs - login for admin
2019-01-26 20:23:06 -08:00
parent 794980ff61
commit 2bf26fccbf
13 changed files with 111 additions and 29 deletions
@@ -1,11 +1,15 @@
 const jwt = require('jsonwebtoken'),
 	errorMaker = require('../helpers/error.maker');

-module.exports = (req, res, next) => {
+module.exports = role => (req, res, next) => {
 	try {
 		const token = req.headers.authorization.split(' ')[1];
 		const decoded = jwt.verify(token, process.env.JWT_KEY);
-		req.user_data = decoded; //for use till end of request
+		req.user = decoded; //for use till end of request
+
+		if (role != req.user.role) {
+			throw new Error();
+		}

 		next();
 	} catch (error) {