verifyJwt.js

const jwt = require('jsonwebtoken')
const dotenv = require('dotenv').config();
const authConfig = process.env.AUTH

module.exports = (req, res, next) => {
    const authHeader = req.headers.authorization

    if (!authHeader){
        return res.status(401).send({error: 'No token provided'})
    }

    // Bearer hash

    const parts = authHeader.split(' ');

    if (!parts.length === 2) {
        return res.status(401).send({error: 'token error'})
    }

    const [ scheme, token ] = parts

    if (! /^Bearer$/i.test(scheme)) {
        return res.status(401).send({ error: 'token malformated' })
    }

    jwt.verify(token, authConfig, (err, decoded)=>{
        if (err) return res.status(401).send({ error: 'invalid Token' })

        req.userId = decoded.id;
        return next();
    })
}