JWT.js

const jwt = require('jsonwebtoken');

const jwtOperation = {
	sign: function(id) {
		return jwt.sign({ id }, process.env.SECRET_KEY, {
			expiresIn: 864, 
		});
	},
	verify: function(token) {
		return jwt.verify(token, process.env.SECRET_KEY, function(err, decoded) {
			if (err) {
				throw new Error(err);
			}
			return decoded;
		});
	},
};

app.post('/login', (req, res) => {
	User.findOne({ email: req.body.email }, function (err, user) {
		if (err) {
			const { output } = Boom.badImplementation();
			return errorReponse(res, output);
		}
		if (!user) {
			const { output } = Boom.notFound('No user found.');
			return errorReponse(res, output);
		}

		const passwordIsValid = bcrypt.compareSync(req.body.password, user.password);
		if (!passwordIsValid) {
			const { output } = Boom.unauthorized({ auth: false, token: null });
			return errorReponse(res, output);
		}
		const token = jwtOperation.sign(user._id);
		return res.status(200).cookie('x-access-token', token, {
			httpOnly: true,
			expires: new Date(Date.now() + 300000),
			signed: true,
		});
	});
});