⚡️ node.js auth middleware

auth.js

//usage: routes.use(authMiddleware) in line above of the following authenticated routes

import jwt from 'jsonwebtoken'

import { promisify } from 'util'

import authConfig from '../config/auth'

export default async (req, res, next) => {
  const authHeader = req.headers.authorization

  if (!authHeader) {
    return res.status(401).json({
      error: 'Token not provided',
    })
  }
  const [, token] = authHeader.split(' ')

  try {
    const decoded = await promisify(jwt.verify)(token, authConfig.secret)

    req.userId = decoded.id

    return next()
  } catch (err) {
    return res.status(401).json({
      error: 'Token invalid',
    })
  }
}

config.auth.js

require('dotenv').config();

export default {
  secret: process.env.JWT_SECRET,
  expiresIn: process.env.JWT_EXPIRES_IN,
};