jwt-middleware-auth 1.0.0

package/index.js

@@ -0,0 +1,58 @@
+const jwt = require('jsonwebtoken');
+
+const verifyToken = (secret) => {
+    return (req, res, next) => {
+      const authHeader = req.headers.token;
+  
+      if (authHeader) {
+        const token = authHeader.split(' ')[1];
+        jwt.verify(token, secret, (err, user) => {
+          if (err) {
+            return res.status(401).json({ message: 'Invalid Token' });
+          }
+          req.user = user;
+          next();
+        });
+      } else {
+        return res.status(401).json({ message: 'Token is not provided' });
+      }
+    };
+  };
+//for updatin User information
+const verifyTokenAndAutherization = (req, res, next) => {
+	verifyToken(req, res, () => {
+		console.log('checking if user is authorized');
+		console.log(req.user.id, req.params.id);
+		if (req.user.id === req.params.id || req.user.role === 'admin') {
+			console.log('user is authorized');
+			next();
+		} else {
+			console.log('called');
+			res.status(403).json('You Are Not Authorized');
+		}
+	});
+};
+
+// for all access
+const verifyAdmin = (req, res, next) => {
+	verifyToken(req, res, () => {
+		req.user.id == req.params.id || req.user.isAdmin == true ? next() : res.status(403).json('You Are Not admin');
+	});
+};
+// for all access
+const verifyManager = (req, res, next) => {
+	verifyToken(req, res, () => {
+		req.user.id == req.params.id || req.user.role == 'manager' ? next() : res.status(403).json('You Are Not manager');
+	});
+};
+//for seller access
+const verifySeller = (req, res, next) => {
+	verifyToken(req, res, () => {
+		req.user.id == req.params.id || req.user.role == 'seller' || req.user.role == 'paymentManager'
+			? next()
+			: res.status(403).json('You Are Not Authorized');
+	});
+};
+// verifyProduct
+
+module.exports = { verifyToken, verifySeller, verifyAdmin, verifyTokenAndAutherization, verifyManager };

package/package.json

@@ -0,0 +1,14 @@
+{
+  "name": "jwt-middleware-auth", 
+  "version": "1.0.0",
+  "description": "A flexible middleware library for JWT authentication in Express.js",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "keywords": ["jwt", "express", "middleware", "auth"],
+  "license": "MIT",
+  "dependencies": {
+    "jsonwebtoken": "^8.5.1"
+  }
+}