bubbles-express-generator/templates/js-pg/src/middleware/verify-user-token.js

A simple CLI to scaffold Express.js starter projects.

import { verifyJWT } from '../lib/auth.js';

/**
 * Blocks auth endpoints when a valid auth cookie is already present.
 *
 * Usage: place before login/register handlers to prevent duplicate sessions.
 * Expects the auth token in `req.cookies.token`; returns a 409 response for
 * valid tokens, otherwise clears invalid cookies and delegates to `next()`.
 */
export const verifyUserToken = (req, res, next) => {
  const token = req.cookies?.token;
  if (!token) {
    return next();
  }
  try {
    verifyJWT(token);
    return res.status(409).json({ message: 'Already authenticated' });
  } catch {
    res.clearCookie('token');
    return next();
  }
};