import jwt from "jsonwebtoken"; import SalesCoOrdinator from "../resources/SalesCoOrdinators/SalesCoOrdinatorModel.js"; export const isAuthenticatedSalesCoOrdinator = async (req, res, next) => { try { if (!req.headers.authorization) { return res.status(401).json({ success: false, message: "Please Login to access this resource", }); } const getToken = req.headers; //remove Bearer from token const fronttoken = getToken.authorization.slice(7); const frontdecoded = jwt.verify(fronttoken, process.env.JWT_SECRET); if (!frontdecoded) { return res.status(400).json({ success: false, message: "incorrect token", }); } const salescoordinator = await SalesCoOrdinator.findById(frontdecoded.id); if (salescoordinator) { req.salescoordinator = salescoordinator; return next(); } else { return res.status(401).json({ success: false, message: "Unauthorized", }); } } catch (error) { if (error.name === "TokenExpiredError") { return res.status(401).json({ message: "Token has expired." }); } else if (error.name === "JsonWebTokenError") { if (error.message === "invalid signature") { return res.status(401).json({ message: "Invalid token!." }); } else { return res.status(401).json({ message: "Invalid token." }); } } else { return res.status(500).json({ message: "An internal error occurred while verifying the token.", }); } // return res.status(401).json({ // success: false, // message: error.message, // }); } };