Auth middleware, checks if user is logged in or not

auth-middleware.js

const jwt = require('jsonwebtoken');

exports.isAuthenticated = (req, res, next) => {
    //Get the request headers and check if we have an authorization header with our token
    if (req.headers && req.headers.authorization && req.headers.authorization.split(' ')[0] === 'JWT') {

        //Check the token for validity
        var token = req.headers.authorization.split(' ')[1];
        jwt.verify(token, 'our-jwt-secret-goes-here', (err, payload) => {

            if (err) {
                res.status(401).json({
                    message: 'Unauthorized user!'
                });
            } else {
                req.user = {...payload}
                next();
            }
        });
    } else {
        res.status(401).json({
            message: 'Unauthorized user!'
        });
    }
};