reject request if token not in db

This commit is contained in:
Guillaume Dorce 2022-08-26 15:14:31 +02:00
parent c2e4aacb28
commit 9c6654182b
2 changed files with 9 additions and 3 deletions

View File

@ -24,8 +24,8 @@ const checkAuth = (req: Request, res: Response, next: NextFunction) => {
req.userId = decodedToken; req.userId = decodedToken;
next(); next();
}) })
.catch(() => { .catch((error) => {
return res.status(401).send('Invalid token'); return res.status(401).send(error);
}); });
}; };

View File

@ -32,7 +32,13 @@ const genToken = (userId: number) => {
}); });
}; };
const verifyToken = (token: string): Promise<number> => { const verifyToken = async (token: string): Promise<number> => {
const prismaToken = await prisma.token.findUnique({
where: { token },
});
if (prismaToken === null) {
throw 'Token not found';
}
return new Promise((resolve, reject) => { return new Promise((resolve, reject) => {
jwt.verify(token, config.JWT_SECRET, (err?, decoded?: jwt.JwtPayload | string) => { jwt.verify(token, config.JWT_SECRET, (err?, decoded?: jwt.JwtPayload | string) => {
if (err) { if (err) {