const jwt = require('jsonwebtoken'); const verifyToken = (req, res, next) => { let localToken = req.header('token'); jwt.verify(localToken, process.env.TOKEN_SEED, (err, decoded) => { if (err) { return res.status(409).json({ err: { message: 'Invalid token.', token: localToken } }) } req.user = decoded.user; next(); }); } const verifyAdmin = (req, res, next) => { let isAdmin = !!req.user.isAdmin; if (!isAdmin) { return res.status(401).json({ err: { message: 'Is not admin.' } }) }; next(); } module.exports = { verifyToken, verifyAdmin };