forked from priyankashrama/JavaScript-Program
-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathAuthDemo.js
More file actions
51 lines (41 loc) · 1.57 KB
/
Copy pathAuthDemo.js
File metadata and controls
51 lines (41 loc) · 1.57 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
const express = require('express');
const jwt = require('jsonwebtoken');
const bodyParser = require('body-parser');
const app = express();
app.use(bodyParser.json());
const SECRET_KEY = 'your_secret_key';
const users = [
{ id: 1, username: 'admin', password: 'admin123', role: 'admin' },
{ id: 2, username: 'user', password: 'user123', role: 'user' }
];
const authenticate = (req, res, next) => {
const token = req.headers['authorization'];
if (!token) return res.status(401).json({ message: 'No token provided' });
jwt.verify(token, SECRET_KEY, (err, decoded) => {
if (err) return res.status(401).json({ message: 'Invalid token' });
req.user = decoded;
next();
});
};
const authorize = (roles) => {
return (req, res, next) => {
if (!roles.includes(req.user.role)) {
return res.status(403).json({ message: 'Access denied' });
}
next();
};
};
app.post('/login', (req, res) => {
const { username, password } = req.body;
const user = users.find(u => u.username === username && u.password === password);
if (!user) return res.status(401).json({ message: 'Invalid credentials' });
const token = jwt.sign({ id: user.id, role: user.role }, SECRET_KEY, { expiresIn: '1h' });
res.json({ token });
});
app.get('/admin', authenticate, authorize(['admin']), (req, res) => {
res.send('Welcome Admin!');
});
app.get('/user', authenticate, authorize(['admin', 'user']), (req, res) => {
res.send('Welcome User!');
});
app.listen(3000, () => console.log('Server running on port 3000'));