JWT Autorization / Logging in and registering

routes/routeDish.js

@@ -2,8 +2,6 @@ import express from "express";
 import Restaurant from "../models/restaurant.js";
 import * as services from "../services/services.js";
 import Dish from "../models/dish.js";
-import sanitizer from "string-sanitizer";
-import mongoose from "mongoose";
 
 var router = express.Router();
 
@@ -27,7 +25,12 @@ router.post("/", (req, res) => {
     if (!result) {
       res.sendStatus(400);
     } else {
-      services.validateUser(req.body.userId, (result) => {
+      const token = req.headers["x-auth-token"];
+      if (!token) {
+        res.sendStatus(401);
+        return;
+      }
+      services.validateUserToken(token, (result) => {
         if (!result) {
           res.sendStatus(401);
         } else {
@@ -66,7 +69,12 @@ router.put("/", (req, res) => {
     if (!result) {
       res.sendStatus(204);
     } else {
-      services.validateUser(req.body.userId, (result) => {
+      const token = req.headers["x-auth-token"];
+      if (!token) {
+        res.sendStatus(401);
+        return;
+      }
+      services.validateUserToken(token, (result) => {
         if (!result) {
           res.sendStatus(401);
         } else {

routes/routeImg.js

@@ -32,29 +32,42 @@ const upload = multer({
   limits: { fileSize: 4000000 },
 }); //max file size = 4Mb
 
+// POST
+
 router.post("/", upload.single("menuiImage"), async (req, res) => {
-  try {
-    const image = req.file;
-    if (!image) {
-      res.sendStatus(204);
-    } else {
-      setTimeout(() => {
-        fs.unlink(image.path, (err) => {
-          if (err) {
-            console.log("No such file or directory");
-          }
-        });
-      }, 1000 * 600);
-      res
-        .status(200)
-        .cookie("img", encodeURI(image.path), {
-          maxAge: 1000 * 600,
-        })
-        .send();
-    }
-  } catch (err) {
-    res.sendStatus(500);
+  const token = req.headers["x-auth-token"];
+  if (!token) {
+    res.sendStatus(401);
+    return;
   }
+  services.validateUserToken(token, (result) => {
+    if (!result) {
+      res.sendStatus(401);
+    } else {
+      try {
+        const image = req.file;
+        if (!image) {
+          res.sendStatus(204);
+        } else {
+          setTimeout(() => {
+            fs.unlink(image.path, (err) => {
+              if (err) {
+                console.log("No such file or directory");
+              }
+            });
+          }, 1000 * 600);
+          res
+            .status(200)
+            .cookie("img", encodeURI(image.path), {
+              maxAge: 1000 * 600,
+            })
+            .send();
+        }
+      } catch (err) {
+        res.sendStatus(500);
+      }
+    }
+  });
 });
 
 export default router;

routes/routeRestaurant.js

@@ -26,7 +26,12 @@ router.get("/", (req, res) => {
 // ADD NEW RESTAURANT
 
 router.post("/", (req, res) => {
-  services.validateUser(req.body.userId, (result) => {
+  const token = req.headers["x-auth-token"];
+  if (!token) {
+    res.sendStatus(401);
+    return;
+  }
+  services.validateUserToken(token, (result) => {
     if (!result) {
       res.sendStatus(401);
     } else {

routes/routeUser.js

@@ -1,14 +1,82 @@
 import express from "express";
 import mongoose from "mongoose";
 import User from "../models/users.js";
-import jwt from "jsonwebtoken";
+import bcrypt from "bcrypt";
+import * as services from "../services/services.js";
 import * as config from "../config/index.js";
 const { API_KEY, jwtSecret } = config;
 
 var router = express.Router();
 
 router.post("/login", (req, res) => {
-  console.log("gds");
+  if (req.body.password && req.body.email) {
+    services.fetchUserHash(req.body.email, (result) => {
+      if (!result) {
+        res.sendStatus(404);
+      } else {
+        var user = result;
+        bcrypt.compare(req.body.password, user.password, function (
+          err,
+          result
+        ) {
+          if (result) {
+            var token = services.generateAuthToken(user);
+            res.header("x-auth-token", token).status(202).send();
+          } else {
+            res.sendStatus(401);
+          }
+        });
+      }
+    });
+  } else {
+    res.sendStatus(404);
+  }
+});
+
+router.post("/check", (req, res) => {
+  const token = req.headers["x-auth-token"];
+  if (!token) {
+    res.sendStatus(401);
+    return;
+  }
+  services.validateUserToken(token, (result) => {
+    if (!result) {
+      res.sendStatus(401);
+    } else {
+      res.send(result);
+    }
+  });
+});
+
+router.post("/register", (req, res) => {
+  if (req.body.key === API_KEY) {
+    services.checkEmailTaken(req.body.email, (result) => {
+      if (result) {
+        res.sendStatus(409);
+      } else {
+        services.hashPass(req.body.password, (hashedPass) => {
+          const user = new User({
+            _id: new mongoose.Types.ObjectId(),
+            email: req.body.email,
+            password: hashedPass,
+            subscriptionActive: req.body.subscriptionActive,
+            subscriptionDue: services.dueDateBasedOnSubscription(
+              req.body.subscriptionActive
+            ),
+          });
+          user.save((err) => {
+            if (err) {
+              res.sendStatus(500);
+            } else {
+              res.sendStatus(201);
+            }
+          });
+        });
+      }
+    });
+  } else {
+    res.sendStatus(404);
+  }
 });
 
 export default router;