Arjun Patel
24 lines
520 B
JavaScript
24 lines
520 B
JavaScript
const jwt = require('jsonwebtoken'),
|
|
errorMaker = require('../helpers/error.maker');
|
|
|
|
module.exports = role => (req, res, next) => {
|
|
try {
|
|
const token = req.headers.authorization.split(' ')[1];
|
|
const decoded = jwt.verify(token, process.env.JWT_KEY);
|
|
|
|
// user info till end of request
|
|
req.user = decoded;
|
|
|
|
// verify role of the call
|
|
if (role != req.user.role) {
|
|
throw new Error();
|
|
}
|
|
|
|
next();
|
|
} catch (error) {
|
|
error.message = 'Check Auth Error';
|
|
error.status = 403;
|
|
return next(error);
|
|
}
|
|
};
|