built out authorize middleware

Author: Jrschellenberg

package-lock.json

@@ -20,9 +20,11 @@
     "chai-http": "^3.0.0",
     "concurrently": "^3.5.1",
     "mocha": "^5.0.4",
-    "nodemon": "^1.9.1"
+    "nodemon": "^1.9.1",
+    "superagent": "^3.8.2"
   },
   "dependencies": {
+    "basic-auth": "^2.0.0",
     "bcrypt": "^1.0.3",
     "body-parser": "~1.18.2",
     "config": "^1.30.0",

package.json

@@ -0,0 +1,21 @@
+const auth = require('basic-auth');
+const User = require('../models/user');
+
+
+export function authorizeUser(req, res, next) {
+	let user = auth(req);
+	if(!user || !user.name || !user.pass){
+		const err = new Error("Access Denied: Please supply login credentials!");
+		err.status = 401;
+		return next(err);
+	}
+	User.authenticate(user.name, user.pass, (error, user) => {
+		if(error || !user){
+			const err = new Error("Access Denied: Wrong email or password");
+			err.status = 401;
+			return next(err);
+		}
+		req.session.userId = user._id;
+		return next();
+	});
+}

src/middleware/index.js

@@ -1,9 +1,11 @@
 const express = require('express');
 const router = express.Router();
 const User = require('../models/user');
+import {authorizeUser} from "../middleware/index";
 
 /* GET home page. */
-router.get('/', function(req, res, next) {
+router.get('/', authorizeUser, (req, res, next) => {
+	console.log(req.session.userId);
 	res.send('test');
 });