mirrors/VogelSocialMedia
1
0
Fork 0
mirror of https://github.com/bubblecup-12/VogelSocialMedia.git synced 2025-07-07 00:58:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

changed statuscodes in authenticateToken

Browse source
This commit is contained in:
Kai Ritthaler 2025-05-16 10:09:41 +02:00 • committed by Rudi Regentonne
parent cf210839ba
commit b0f631cf45
1 changed files with 4 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
code/backend/src/middleware/authenticateToken.ts
View file

@ -1,6 +1,7 @@
import express, { NextFunction, Request, Response } from "express"; import express, { NextFunction, Request, Response } from "express";
import jwt, { TokenExpiredError } from "jsonwebtoken"; import jwt, { TokenExpiredError } from "jsonwebtoken";
import dotenv from "dotenv"; import dotenv from "dotenv";
import { StatusCodes } from "http-status-codes";
dotenv.config(); dotenv.config();
// imports the JWT secret // imports the JWT secret
const JWT_SECRET: string = process.env.TOKEN_SECRET!; const JWT_SECRET: string = process.env.TOKEN_SECRET!;
@ -28,7 +29,7 @@ export function authenticateToken() {
const token = authHeader && authHeader.split(" ")[1]; // split the header to get the token const token = authHeader && authHeader.split(" ")[1]; // split the header to get the token
if (token == null) if (token == null)
res.sendStatus(401); // if there is no token, return 401 Unauthorized res.sendStatus(StatusCodes.UNAUTHORIZED); // if there is no token, return 401 Unauthorized
else { else {
jwt.verify(token, JWT_SECRET, (err: any, user: any) => { jwt.verify(token, JWT_SECRET, (err: any, user: any) => {
// verify the token with the secret // verify the token with the secret
@ -36,7 +37,7 @@ export function authenticateToken() {
if (err) { if (err) {
if (err instanceof TokenExpiredError) { if (err instanceof TokenExpiredError) {
// check if the error is expired and return 401 // check if the error is expired and return 401
res.status(401).json({ res.status(StatusCodes.UNAUTHORIZED).json({
error: "Token expired", error: "Token expired",
details: [{ message: "Token expired" }], details: [{ message: "Token expired" }],
}); });
@ -45,7 +46,7 @@ export function authenticateToken() {
// if the token is invalid, return 403 Forbidden // if the token is invalid, return 403 Forbidden
else { else {
res.status(403).json({ res.status(StatusCodes.FORBIDDEN).json({
error: "Invalid token", error: "Invalid token",
details: [{ message: "Invalid token" }], details: [{ message: "Invalid token" }],
}); });