diff --git a/src/middleware/authMiddleware.js b/src/middleware/authMiddleware.js index aa03c94..3b89c9d 100644 --- a/src/middleware/authMiddleware.js +++ b/src/middleware/authMiddleware.js @@ -1,12 +1,14 @@ import jwt from 'jsonwebtoken' function authMiddleware(req, res, next) { - const token = req.headers['authorization'] + const authHeader = req.headers['authorization'] || req.headers['Authorization']; + if (!authHeader) { return res.status(401).json({ message: "No token provided" }) } - if (!token) { return res.status(401).json({ message: "No token provided" }) } + // support headers in the form: 'Bearer ' or just the token + const token = authHeader.startsWith('Bearer ') ? authHeader.split(' ')[1] : authHeader; - jwt.verify(token, process.env.JWT_SECRET, (err, decoded) => { - if(err) {return res.status(401).json({message: "Invalid token"})} + jwt.verify(token, process.env.JWT_SECRET, (err, decoded) => { + if (err) { return res.status(401).json({ message: "Invalid token" }) } req.userId = decoded.id next() })