Skip to content

Instantly share code, notes, and snippets.

@christophetd
Created April 4, 2016 13:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save christophetd/82f63a34be3d28510fa4aa961e04a4d9 to your computer and use it in GitHub Desktop.
Save christophetd/82f63a34be3d28510fa4aa961e04a4d9 to your computer and use it in GitHub Desktop.
var express = require('express');
var User = require('../models/User');
// route middleware to verify a token
var auth = function(req, res, next) {
// check header or url parameters or post parameters for token
// decode token
var token = req.body.accessToken || req.headers['x-access-token'];
if (token) {
//verify if user exists with toekn
User.findOne({ accessToken: token }, function(err, user) {
req.user = user;
next();
});
} else {
// if there is no token
// return an error
return res.status(403).send({
success: false,
message: 'No token provided.'
});
}
}
};
module.exports = auth;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment