Skip to content

Commit 2cfd049

Browse files
rumeshmadhusankarumeshmadhusanka
committed
auth
1 parent 045f30a commit 2cfd049

File tree

1 file changed

+56
-62
lines changed

1 file changed

+56
-62
lines changed

‎middleware/auth.js

Lines changed: 56 additions & 62 deletions
Original file line numberDiff line numberDiff line change
@@ -1,126 +1,120 @@
11
const fs = require("fs");
22
const path = require('path');
3-
const jwt = require('jsonwebtoken')
4-
const connection = require("../db");
3+
const jwt = require('jsonwebtoken');
4+
const poolPromise = require("../db");
55
const config = JSON.parse(fs.readFileSync(path.resolve(__dirname, "../env.config.json"), 'utf8'));
6-
const json_response_model = JSON.parse(fs.readFileSync(path.resolve(__dirname, "../response_format.json"), 'utf8'));
7-
6+
//const json_response_model = JSON.parse(fs.readFileSync(path.resolve(__dirname, "../response_format.json"), 'utf8'));
7+
let json_response_model = require('../json_response');
88
module.exports = {
99

10-
verifyUser: (req, res, next) => {
11-
let json_response = Object.create(json_response_model)
12-
13-
let token = req.headers['x-access-token']
10+
verifyUser: async (req, res, next) => {
11+
//let json_response = Object.create(json_response_model)
12+
let json_response = json_response_model();
13+
let token = req.headers['x-access-token'];
1414
if (!token) {
1515
json_response['success'] = false;
1616
json_response['message'] = "Login to proceed";
17-
json_response['data'] = []
18-
json_response['token'] = ''
17+
json_response['data'] = [];
18+
json_response['token'] = '';
1919
return res.status(403).json(json_response);
2020
}
2121

2222
jwt.verify(token, config.secret, (error, decoded) => {
2323
if (error) {
2424
json_response['success'] = false;
2525
json_response['message'] = "Cannot verify user";
26-
json_response['data'] = []
27-
json_response['token'] = ''
26+
json_response['data'] = [];
27+
json_response['token'] = '';
2828
return res.status(403).json(json_response);
2929
}
3030

31-
if (typeof (decoded.customerId) !== 'undefined') {
32-
req.userId = decoded.customerId
33-
req.userType = 1
34-
}
35-
else if (typeof (decoded.shopId) !=='undefined') {
36-
req.userId = decoded.shopId
37-
req.userType = 2
31+
if (typeof (decoded.user_id) !== 'undefined') {
32+
req.userId = decoded.user_id;
33+
req.userType = 'REG_USER';
34+
} else if (typeof (decoded.admin_id) !== 'undefined') {
35+
req.userId = decoded.admin_id;
36+
req.userType = 'ADMIN';
3837
}
3938
next()
4039
})
4140
},
4241

43-
isCustomer: (req, res, next) => {
44-
let json_response = Object.create(json_response_model)
45-
46-
if (req.userType === 1) {
42+
isAdmin: async (req, res, next) => {
43+
// let json_response = Object.create(json_response_model)
44+
let json_response = json_response_model();
45+
if (req.userType === 'ADMIN') {
4746
next()
48-
}
49-
else {
47+
} else {
5048
json_response['success'] = false;
5149
json_response['message'] = "Access not authorized";
52-
json_response['data'] = []
53-
json_response['token'] = req.headers['x-access-token']
50+
json_response['data'] = [];
51+
json_response['token'] = req.headers['x-access-token'];
5452
return res.status(401).json(json_response);
5553
}
5654
},
5755

58-
isShop: (req, res, next) => {
59-
let json_response = Object.create(json_response_model)
60-
61-
if (req.userType === 2) {
56+
isRegUser: (req, res, next) => {
57+
//let json_response = Object.create(json_response_model)
58+
let json_response = json_response_model();
59+
if (req.userType === 'REG_USER') {
6260
next()
63-
}
64-
else {
61+
} else {
6562
json_response['success'] = false;
6663
json_response['message'] = "Access not authorized";
67-
json_response['data'] = []
68-
json_response['token'] = req.headers['x-access-token']
64+
json_response['data'] = [];
65+
json_response['token'] = req.headers['x-access-token'];
6966
return res.status(401).json(json_response);
7067
}
7168
},
7269

73-
isSameUser: (req, res, next) => {
74-
let json_response = Object.create(json_response_model)
75-
76-
if (req.userId == req.params.id) {
70+
isSameUser: async (req, res, next) => {
71+
//let json_response = Object.create(json_response_model)
72+
let json_response = json_response_model();
73+
if (req.userId === req.params.id) {
7774
next()
78-
}
79-
else {
75+
} else {
8076
json_response['success'] = false;
8177
json_response['message'] = "Access not authorized";
82-
json_response['data'] = []
83-
json_response['token'] = req.headers['x-access-token']
78+
json_response['data'] = [];
79+
json_response['token'] = req.headers['x-access-token'];
8480
return res.status(401).json(json_response);
8581
}
8682
},
8783

88-
checkAccessToOrder: (req, res, next) => {
89-
let json_response = Object.create(json_response_model)
90-
91-
let orderId = req.params.id
92-
let userId = req.userId
93-
let userType = req.userType
84+
checkAccessToOrder: async (req, res, next) => {
85+
let json_response = Object.create(json_response_model);
86+
87+
let orderId = req.params.id;
88+
let userId = req.userId;
89+
let userType = req.userType;
9490

9591
if (userType === 1) {
9692
connection.query("select customer_id from orders where id=?", orderId, (error, results) => {
9793
if (error) {
9894
json_response['success'] = false;
9995
json_response['message'] = "Access failed";
100-
json_response['data'] = []
101-
json_response['token'] = req.headers['x-access-token']
96+
json_response['data'] = [];
97+
json_response['token'] = req.headers['x-access-token'];
10298
return res.status(503).json(json_response);
103-
}
104-
else if (results.length === 0){
99+
} else if (results.length === 0) {
105100
json_response['success'] = false;
106101
json_response['message'] = "Order does not exist";
107-
json_response['data'] = []
108-
json_response['token'] = req.headers['x-access-token']
102+
json_response['data'] = [];
103+
json_response['token'] = req.headers['x-access-token'];
109104
return res.status(400).json(json_response);
110105
}
111-
let customerId = results[0].customer_id
112-
if (customerId == userId) {
106+
let customerId = results[0].customer_id;
107+
if (customerId === userId) {
113108
return next()
114109
}
115110
json_response['success'] = false;
116111
json_response['message'] = "Access not authorized";
117-
json_response['data'] = []
118-
json_response['token'] = req.headers['x-access-token']
112+
json_response['data'] = [];
113+
json_response['token'] = req.headers['x-access-token'];
119114
return res.status(401).json(json_response);
120115
})
121-
}
122-
else if (userType === 2) {
116+
} else if (userType === 2) {
123117
next()
124118
}
125119
}
126-
}
120+
};

0 commit comments

Comments
 (0)