13 lines
392 B

  1. import jwt from "jsonwebtoken";
  2. export const verifyToken = (req, res, next) => {
  3. const authHeader = req.headers["authorization"];
  4. const token = authHeader && authHeader.split(" ")[1];
  5. if (token == null) return res.sendStatus(401);
  6. jwt.verify(token, process.env.ACCESS_TOKEN_SECRET, (err, user) => {
  7. if (err) return res.sendStatus(403);
  8. req.user = user;
  9. next();
  10. });
  11. };