Check user auth in api request

backend/routes/auth/authSettings.js

@@ -0,0 +1,4 @@
+const roles = [{ uid: 'admin' }, { uid: 'moderator' }, { uid: 'user' }];
+const defaultDangerKey = 'test-plat-default-key';
+
+module.exports = { roles, defaultDangerKey };

backend/routes/auth/roles.js

@@ -1,2 +0,0 @@
-const roles = [{ uid: 'admin' }, { uid: 'moderator' }, { uid: 'user' }];
-module.exports = roles;

backend/routes/auth/signin.js

@@ -4,9 +4,11 @@ const defineUser = require('../../models/users');
 const { DataTypes } = require('sequelize');
 const bcrypt = require('bcrypt');
 const jwt = require('jsonwebtoken');
+const { defaultDangerKey } = require('./authSettings');
 
 module.exports = function (sequelize) {
   const User = defineUser(sequelize, DataTypes);
+  const secretKey = process.env.SECRET_KEY || defaultDangerKey;
 
   router.post('/signin', async (req, res) => {
     try {
@@ -24,7 +26,7 @@ module.exports = function (sequelize) {
       if (!passwordMatch) {
         return res.status(401).json({ error: 'Authentication failed' });
       }
-      const accessToken = jwt.sign({ userId: user.id }, 'your-secret-key', {
+      const accessToken = jwt.sign({ userId: user.id }, secretKey, {
         expiresIn: '1h',
       });
       res.status(200).json({ access_token: accessToken, user });

backend/routes/auth/signup.js

@@ -2,12 +2,13 @@ const express = require('express');
 const router = express.Router();
 const defineUser = require('../../models/users');
 const { DataTypes } = require('sequelize');
-const roles = require('./roles');
+const { roles, defaultDangerKey } = require('./authSettings');
 const bcrypt = require('bcrypt');
 const jwt = require('jsonwebtoken');
 
 module.exports = function (sequelize) {
   const User = defineUser(sequelize, DataTypes);
+  const secretKey = process.env.SECRET_KEY || defaultDangerKey;
 
   router.post('/signup', async (req, res) => {
     try {
@@ -27,7 +28,7 @@ module.exports = function (sequelize) {
         role: initialRole,
       });
 
-      const accessToken = jwt.sign({ userId: user.id }, 'your-secret-key', {
+      const accessToken = jwt.sign({ userId: user.id }, secretKey, {
         expiresIn: '1h',
       });