Checkmate/Server/middleware/verifyJWT.js

const jwt = require("jsonwebtoken");
const logger = require("../utils/logger");
const SERVICE_NAME = "verifyJWT";
const TOKEN_PREFIX = "Bearer ";

/**
 * Verifies the JWT token
 * @function
 * @param {express.Request} req
 * @param {express.Response} res
 * @param {express.NextFunction} next
 * @returns {express.Response}
 */
const verifyJWT = (req, res, next) => {
  const token = req.headers["authorization"];
  // Make sure a token is provided
  if (!token) {
    const error = new Error("No token provided");
    error.status = 401;
    error.service = SERVICE_NAME;
    next(error);
    return;
  }
  // Make sure it is properly formatted
  if (token.startsWith(TOKEN_PREFIX)) {
    const parsedToken = token.slice(TOKEN_PREFIX.length, token.length);
    // Verify the token's authenticity
    jwt.verify(parsedToken, process.env.JWT_SECRET, (err, decoded) => {
      if (err) {
        logger.error("Invalid token", { service: SERVICE_NAME });
        return res.status(401).json({ success: false, msg: "Invalid token" });
      }
      //Add the user to the request object for use in the route
      req.user = decoded;
      next();
    });
  } else {
    error.status = 400;
    error.service = SERVICE_NAME;
    next(error);
  }
};

module.exports = { verifyJWT };