fixed login

This commit is contained in:
2025-10-09 16:37:43 +02:00
parent adc47c2480
commit 4dcff0f70e
10 changed files with 354 additions and 234 deletions

View File

@@ -1,7 +1,6 @@
// backend/src/middleware/auth.ts
import { Request, Response, NextFunction } from 'express';
import jwt from 'jsonwebtoken';
import { JWTPayload } from '../controllers/authController.js';
const JWT_SECRET = process.env.JWT_SECRET || 'your-secret-key';
@@ -14,15 +13,21 @@ export interface AuthRequest extends Request {
}
export const authMiddleware = (req: AuthRequest, res: Response, next: NextFunction): void => {
const token = req.header('Authorization')?.replace('Bearer ', '');
const authHeader = req.header('Authorization');
console.log('🔐 Auth middleware - Authorization header:', authHeader);
const token = authHeader?.replace('Bearer ', '');
if (!token) {
console.log('❌ No token provided');
res.status(401).json({ error: 'Access denied. No token provided.' });
return;
}
try {
const decoded = jwt.verify(token, JWT_SECRET) as JWTPayload;
const decoded = jwt.verify(token, JWT_SECRET) as any;
console.log('✅ Token valid for user:', decoded.email);
req.user = {
userId: decoded.id,
email: decoded.email,
@@ -30,6 +35,7 @@ export const authMiddleware = (req: AuthRequest, res: Response, next: NextFuncti
};
next();
} catch (error) {
console.error('❌ Invalid token:', error);
res.status(400).json({ error: 'Invalid token.' });
}
};
@@ -37,6 +43,7 @@ export const authMiddleware = (req: AuthRequest, res: Response, next: NextFuncti
export const requireRole = (roles: string[]) => {
return (req: AuthRequest, res: Response, next: NextFunction): void => {
if (!req.user || !roles.includes(req.user.role)) {
console.log('❌ Insufficient permissions for user:', req.user?.email);
res.status(403).json({ error: 'Access denied. Insufficient permissions.' });
return;
}