Check user auth in api request

This commit is contained in:
Takeshi Kimata
2024-05-25 12:35:10 +09:00
parent 7a0bb63e7b
commit d6e7c98025
19 changed files with 106 additions and 50 deletions

View File

@@ -2,12 +2,13 @@ const express = require('express');
const router = express.Router();
const defineUser = require('../../models/users');
const { DataTypes } = require('sequelize');
const roles = require('./roles');
const { roles, defaultDangerKey } = require('./authSettings');
const bcrypt = require('bcrypt');
const jwt = require('jsonwebtoken');
module.exports = function (sequelize) {
const User = defineUser(sequelize, DataTypes);
const secretKey = process.env.SECRET_KEY || defaultDangerKey;
router.post('/signup', async (req, res) => {
try {
@@ -27,7 +28,7 @@ module.exports = function (sequelize) {
role: initialRole,
});
const accessToken = jwt.sign({ userId: user.id }, 'your-secret-key', {
const accessToken = jwt.sign({ userId: user.id }, secretKey, {
expiresIn: '1h',
});