Auth middleware using JWT

auth.js

const jwt = require('jsonwebtoken')

const verifyToken = (req, res, next) => {
    const token = req.headers['x-access-token'] || req.headers['authorization']
    if(token){
        jwt.verify(token, "chor", (err, decoded) => {
            if(err){
                res.status(403).json({ err })
            }
            if(decoded){
                req.decoded = decoded
                next()
            }
        })
    } 
    else{
        res.status(403).json({ msg: "Token not provided"})
    }
}

const signToken = (req, res, next) => {
    const { email, password } = req.body
    // Below info should be fetched from DB
    let checkEmail = "admin@domain.com"
    let checkPassword = "123"
    if(email && password) {
        if(email === checkEmail && password === checkPassword){
            let token = jwt.sign({email: email}, "chor", { expiresIn: "1h"}) // expires in 1 hour
            res.status(400).json({ msg: "Authentication successful", token: token})
        }
        else{
            res.status(403).json({ msg: "Credentials not correct"})
        }
    }
    else{
        res.status(403).json({ msg: "No email and password provided"})
    }
}

module.exports = { verifyToken, signToken }