@@ 259-287 (lines=29) @@ | ||
256 | function checkToken(req, res, next) { |
|
257 | var token = req.headers['x-access-token']; |
|
258 | ||
259 | if (token) { |
|
260 | jwt.verify(token, jwtSecret, function(err, decoded) { |
|
261 | if (err) { |
|
262 | return res.status(500).json({ |
|
263 | errors: { |
|
264 | status: 500, |
|
265 | source: req.path, |
|
266 | title: "Failed authentication", |
|
267 | detail: err.message |
|
268 | } |
|
269 | }); |
|
270 | } |
|
271 | ||
272 | req.user = {}; |
|
273 | req.user.api_key = decoded.api_key; |
|
274 | req.user.email = decoded.email; |
|
275 | ||
276 | next(); |
|
277 | }); |
|
278 | } else { |
|
279 | return res.status(401).json({ |
|
280 | errors: { |
|
281 | status: 401, |
|
282 | source: req.path, |
|
283 | title: "No token", |
|
284 | detail: "No token provided in request headers" |
|
285 | } |
|
286 | }); |
|
287 | } |
|
288 | } |
|
289 | ||
290 | return { |
@@ 396-426 (lines=31) @@ | ||
393 | checkToken: function(req, res, next) { |
|
394 | var token = req.headers['x-access-token']; |
|
395 | ||
396 | if (token) { |
|
397 | jwt.verify(token, jwtSecret, function(err, decoded) { |
|
398 | if (err) { |
|
399 | return res.status(500).json({ |
|
400 | errors: { |
|
401 | status: 500, |
|
402 | source: req.path, |
|
403 | title: "Failed authentication", |
|
404 | detail: err.message |
|
405 | } |
|
406 | }); |
|
407 | } |
|
408 | ||
409 | req.user = {}; |
|
410 | req.user.api_key = decoded.api_key; |
|
411 | req.user.email = decoded.email; |
|
412 | ||
413 | next(); |
|
414 | ||
415 | return undefined; |
|
416 | }); |
|
417 | } else { |
|
418 | return res.status(401).json({ |
|
419 | errors: { |
|
420 | status: 401, |
|
421 | source: req.path, |
|
422 | title: "No token", |
|
423 | detail: "No token provided in request headers" |
|
424 | } |
|
425 | }); |
|
426 | } |
|
427 | } |
|
428 | }; |
|
429 |