import jwt from "jsonwebtoken";

const verifyToken = (req,res,next) =>{

const token = req.cookies.accessToken

if(!token){
return res.status(401).json({success:false, message: "You're not
authorize"})

//neu token ton tai => verify the token

jwt.verify(token, process.env.JWT_SECRET_KEY, (err, user) =>{
if(err){
return res.status(401).json({success:false, message:"token is
invalid"})
}

req.user = user
next()
})
}

export const verifyUser = (req, res, next) =>{

verifyToken(req, res, next, ()=> {
if(req.user.id === req.params.id || req.user.role ==="user"){
next();

} else {
return req.status(401).json({success: false, message: "You're not
authenticated"});

}
})
}

export const verifyAdmin = (req, res, next) =>{

verifyToken(req, res, next, ()=> {
if( req.user.role ==="admin"){
next();

} else {
return res.status(401).json({success: false, message: "You're not
authorize"});
 }
})
}
# JWT_SECRET_KEY =
f4a804c2162faa99da1308457ef05d43a51bf837a4c0b91af7b26c03338de2de