mirror of
https://github.com/donpat1to/Schichtenplaner.git
synced 2025-11-30 22:45:46 +01:00
fixed login
This commit is contained in:
@@ -1,7 +1,6 @@
|
||||
// backend/src/middleware/auth.ts
|
||||
import { Request, Response, NextFunction } from 'express';
|
||||
import jwt from 'jsonwebtoken';
|
||||
import { JWTPayload } from '../controllers/authController.js';
|
||||
|
||||
const JWT_SECRET = process.env.JWT_SECRET || 'your-secret-key';
|
||||
|
||||
@@ -14,15 +13,21 @@ export interface AuthRequest extends Request {
|
||||
}
|
||||
|
||||
export const authMiddleware = (req: AuthRequest, res: Response, next: NextFunction): void => {
|
||||
const token = req.header('Authorization')?.replace('Bearer ', '');
|
||||
const authHeader = req.header('Authorization');
|
||||
console.log('🔐 Auth middleware - Authorization header:', authHeader);
|
||||
|
||||
const token = authHeader?.replace('Bearer ', '');
|
||||
|
||||
if (!token) {
|
||||
console.log('❌ No token provided');
|
||||
res.status(401).json({ error: 'Access denied. No token provided.' });
|
||||
return;
|
||||
}
|
||||
|
||||
try {
|
||||
const decoded = jwt.verify(token, JWT_SECRET) as JWTPayload;
|
||||
const decoded = jwt.verify(token, JWT_SECRET) as any;
|
||||
console.log('✅ Token valid for user:', decoded.email);
|
||||
|
||||
req.user = {
|
||||
userId: decoded.id,
|
||||
email: decoded.email,
|
||||
@@ -30,6 +35,7 @@ export const authMiddleware = (req: AuthRequest, res: Response, next: NextFuncti
|
||||
};
|
||||
next();
|
||||
} catch (error) {
|
||||
console.error('❌ Invalid token:', error);
|
||||
res.status(400).json({ error: 'Invalid token.' });
|
||||
}
|
||||
};
|
||||
@@ -37,6 +43,7 @@ export const authMiddleware = (req: AuthRequest, res: Response, next: NextFuncti
|
||||
export const requireRole = (roles: string[]) => {
|
||||
return (req: AuthRequest, res: Response, next: NextFunction): void => {
|
||||
if (!req.user || !roles.includes(req.user.role)) {
|
||||
console.log('❌ Insufficient permissions for user:', req.user?.email);
|
||||
res.status(403).json({ error: 'Access denied. Insufficient permissions.' });
|
||||
return;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user