northwind-rest-api/backend/middleware/verify-token.js

Local REST API Exposing Northwind Database.

const jwt = require("jsonwebtoken");

function verifyToken(request, response, next) {
    if (!request.headers.authorization) return response.status(401).send("You are not logged-in.");
    const token = request.headers.authorization.substring(7);
    if (!token) return response.status(401).send("You are not logged-in.");
    jwt.verify(token, config.jwtKey, err => {
        if (err) {
            if (err.message === "jwt expired") return response.status(403).send("Your login session has expired.");
            return response.status(401).send("You are not logged-in.");
        }
        next();
    });
}

module.exports = verifyToken;