瀏覽代碼

test jwt middleware on profile api

허용운 5 年之前
父節點
當前提交
26081e3efe
共有 2 個文件被更改,包括 25 次插入4 次删除
  1. 6 4
      server/middlewares/verify-token.js
  2. 19 0
      server/routes/auth.js

+ 6 - 4
server/middlewares/verify-token.js

@@ -4,11 +4,13 @@ module.exports = function ( req, res, next ) {
   let token = req.headers['x-access-token'] || req.headers['authorization']
   let checkBearer = 'Bearer '
 
-  if (token.startsWith(checkBearer)) {
-    token = token.slice(checkBearer.length, token.length)    
-  }
-
+  
   if (token) {
+    
+    if (token.startsWith(checkBearer)) {
+      token = token.slice(checkBearer.length, token.length)    
+    }
+
     jwt.verify(token, process.env.SECRET, (err, decoded) => {
       if (err) {
         res.json({

+ 19 - 0
server/routes/auth.js

@@ -1,5 +1,6 @@
 const router = require('express').Router()
 const User = require('../models/user')
+const virifyToken = require('../middlewares/verify-token')
 
 const jwt = require('jsonwebtoken')
 
@@ -32,4 +33,22 @@ router.post('/auth/signup', async (req, res) => {
   }
 })
 
+
+router.get('/auth/user', virifyToken, async (req, res) => {
+  try {
+    let foundUser = await User.findOne({ _id: req.decoded._id })
+    if (foundUser) {
+      res.json({
+        success: true,
+        user: foundUser
+      })
+    }
+  } catch (err) {
+    res.status(500).json({
+      success: false,
+      message: err.message
+    })
+  }
+})
+
 module.exports = router