Add adminAuthenticate() middleware

Author: kkamara

src/middlewares/v1/adminAuthenticate.js

@@ -0,0 +1,51 @@
+"use strict";
+const { status, } = require("http-status");
+const moment = require("moment-timezone");
+const { message401, } = require("../../utils/httpResponses");
+const db = require("../../models/v1/index");
+
+module.exports = async (req, res, next) => {
+  if (!req.headers.authorization) {
+    res.status(status.UNAUTHORIZED);
+    return res.json({
+      message: message401,
+    });
+  }
+  const authTokenResult = await db.sequelize
+    .models
+    .userToken
+    .authenticate(
+      req.headerString("authorization"),
+    );
+  if (false === authTokenResult) {
+    res.status(status.UNAUTHORIZED);
+    return res.json({
+      message: message401,
+    });
+  }
+  const tokenIsExpired = moment(authTokenResult.expiredAt)
+    .unix() < moment().utc().unix();
+  if (true === tokenIsExpired) {
+    res.status(status.UNAUTHORIZED);
+    return res.json({
+      message: message401,
+    });
+  }
+  const extractedToken = req.headerString("authorization")
+    .split(" ")[1];
+  req.session.userId = authTokenResult.userId;
+  req.session.extractedToken = extractedToken;
+  const user = await db.sequelize
+    .models
+    .user
+    .getUserByAuthToken(
+      req.session.extractedToken,
+    );
+  if (false === user || "admin" !== user.role) {
+    res.status(status.UNAUTHORIZED);
+    return res.json({
+      message: message401,
+    });
+  }
+  return next();
+};

src/routes/api/v1/web/stats/admin/products/products.js

@@ -1,12 +1,12 @@
 const express = require("express");
 const { status, } = require("http-status");
-const authenticate = require("../../../../../../../middlewares/v1/authenticate");
+const adminAuthenticate = require("../../../../../../../middlewares/v1/adminAuthenticate");
 const db = require("../../../../../../../models/v1/index");
 const { message500 } = require("../../../../../../../utils/httpResponses");
 
 const router = express.Router();
 
-router.get("/", authenticate, async (req, res) => {
+router.get("/", adminAuthenticate, async (req, res) => {
   const result = await db.sequelize.models.product.getAdminProductCountStat();
   if (false === result) {
     res.status(status.UNAUTHORIZED);