Check user auth in api request

2024-05-25 23:34:38 +09:00
parent 4092b14f3c
commit 3984373025
16 changed files with 149 additions and 64 deletions
--- a/backend/routes/projects/delete.js
+++ b/backend/routes/projects/delete.js
@@ -4,9 +4,10 @@ const defineProject = require('../../models/projects');
 const { DataTypes } = require('sequelize');

 module.exports = function (sequelize) {
+  const { verifySignedIn, verifyProjectOwner } = require('../../middleware/auth')(sequelize);
  const Project = defineProject(sequelize, DataTypes);

-  router.delete('/:projectId', async (req, res) => {
+  router.delete('/:projectId', verifySignedIn, verifyProjectOwner, async (req, res) => {
    const projectId = req.params.projectId;
    try {
      const project = await Project.findByPk(projectId);