Node server example using 'query-string' npm pkg.

gatekeeper-server.js

const express = require('express');
const queryString = require('query-string');
const app = express();

const USERS = [
  {
    id: 1,
    firstName: 'Joe',
    lastName: 'Schmoe',
    userName: '[email protected]',
    position: 'Sr. Engineer',
    isAdmin: true,
    password: 'password',
  },
  {
    id: 2,
    firstName: 'Sally',
    lastName: 'Student',
    userName: '[email protected]',
    position: 'Jr. Engineer',
    isAdmin: true,
    password: 'password',
  },
  {
    id: 3,
    firstName: 'Lila',
    lastName: 'LeMonde',
    userName: '[email protected]',
    position: 'Growth Hacker',
    isAdmin: false,
    password: 'password',
  },
  {
    id: 4,
    firstName: 'Freddy',
    lastName: 'Fun',
    userName: '[email protected]',
    position: 'Community Manager',
    isAdmin: false,
    password: 'password',
  },
];

function gateKeeper(req, res, next) {
  let params = req.get('x-username-and-password');
  const user = params.split(',')[0];
  const pwd = params.split(',')[1];

  for (var i = 0; i < USERS.length; i++) {
    console.log(USERS[i].userName, USERS[i].password);
  }

  // const {user, pass} = Object.assign(
  //   {user: null, pass: null}, queryString.parse(req.get('x-username-and-password')));

  req.user = USERS.find(
    (usr, index) => usr.userName === user && usr.password === pwd
  );
  next();
}

app.use(gateKeeper);
app.get('/api/users/me', (req, res) => {
  if (req.user === undefined) {
    return res
      .status(403)
      .json({ message: 'Must supply valid user credentials' });
  }

  const { firstName, lastName, id, userName, position } = req.user;
  return res.json({ firstName, lastName, id, userName, position });
});

app.listen(process.env.PORT, () => {
  console.log(`Your app is listening on port ${process.env.PORT}`);
});