first stable version

Author: drhanlau

app.js

@@ -11,6 +11,7 @@ var indexRouter = require('./routes/index');
 var usersRouter = require('./routes/users');
 var apiRouter = require('./routes/api');
 var ownerRouter = require('./routes/owner');
+var visitorRouter = require('./routes/visitor');
 
 var app = express();
 
@@ -26,10 +27,30 @@ app.use(bodyParser.urlencoded({ extended: true }));
 app.use(cookieParser());
 app.use(express.static(path.join(__dirname, 'public')));
 
+
+const dotenv = require("dotenv").config();
+const jwt = require("express-jwt");
+
+function authenticateToken(req, res, next) {
+  // Gather the jwt access token from the request header
+  const authHeader = req.headers['authorization']
+  const token = authHeader && authHeader.split(' ')[1]
+  if (token == null) return res.sendStatus(401) // if there isn't any token
+
+  jwt.verify(token, process.env.TOKEN_SECRET, (err, user) => {
+    console.log(err)
+    if (err) return res.sendStatus(403)
+    req.user = user
+    next() // pass the execution off to whatever request the client intended
+  })
+}
+
+
 app.use('/', indexRouter);
 app.use('/users', usersRouter);
 app.use('/qr', apiRouter);
 app.use('/owner', ownerRouter);
+app.use('/visitor', jwt({ secret: process.env.TOKEN_SECRET }), visitorRouter)
 
 // catch 404 and forward to error handler
 app.use(function(req, res, next) {

package-lock.json

@@ -6,12 +6,16 @@
     "start": "nodemon ./bin/www"
   },
   "dependencies": {
+    "axios": "^0.19.2",
     "cookie-parser": "~1.4.4",
     "cors": "^2.8.5",
     "debug": "~2.6.9",
+    "dotenv": "^8.2.0",
     "ejs": "~2.6.1",
     "express": "~4.16.1",
+    "express-jwt": "^5.3.3",
     "http-errors": "~1.6.3",
+    "jsonwebtoken": "^8.5.1",
     "morgan": "~1.9.1",
     "mssql": "^6.2.0",
     "qrcode": "^1.4.4"

package.json

@@ -0,0 +1,19 @@
+const jwt = require("jsonwebtoken");
+
+function authenticateToken(req, res, next) {
+  // Gather the jwt access token from the request header
+  const authHeader = req.headers['authorization']
+  const token = authHeader && authHeader.split(' ')[1]
+  if (token == null) return res.sendStatus(401) // if there isn't any token
+
+  jwt.verify(token, process.env.TOKEN_SECRET, (err, user) => {
+    console.log(err)
+    if (err) return res.sendStatus(403)
+    req.user = user
+    next() // pass the execution off to whatever request the client intended
+  })
+}
+
+module.exports = {
+  auth: authenticateToken
+}

routes/auth.js

@@ -3,7 +3,7 @@ var router = express.Router();
 
 /* GET home page. */
 router.get('/', function(req, res, next) {
-  res.render('index', { title: 'Express' });
+  res.render('index', { title: 'GetDingDing.com' });
 });
 
 module.exports = router;