summary refs log tree commit diff
path: root/src/api
diff options
context:
space:
mode:
authorRory& <root@rory.gay>2025-06-01 09:23:16 +0200
committerRory& <root@rory.gay>2025-06-01 09:23:16 +0200
commit073248777a6414505b1df7f65a0cb1dcf5c44118 (patch)
tree35c0c82c1841ee4c7434ada3c89c3e702561361a /src/api
parentLogin, delete user (diff)
downloadnodejs-final-assignment-073248777a6414505b1df7f65a0cb1dcf5c44118.tar.xz
Update test client
Diffstat (limited to 'src/api')
-rw-r--r--src/api/middlewares/authMiddleware.js1
-rw-r--r--src/api/routes/auth/accountRoutes.js17
2 files changed, 14 insertions, 4 deletions
diff --git a/src/api/middlewares/authMiddleware.js b/src/api/middlewares/authMiddleware.js

index a1ba498..1187112 100644 --- a/src/api/middlewares/authMiddleware.js +++ b/src/api/middlewares/authMiddleware.js
@@ -16,6 +16,7 @@ export function validateAuth(options) { const user = (req.user = await DbUser.findById(auth.id).exec()); if (options.roles && !options.roles.includes(user.type)) { + res.status(401).send('Unauthorized'); return; } diff --git a/src/api/routes/auth/accountRoutes.js b/src/api/routes/auth/accountRoutes.js
index 5c88c22..18c204d 100644 --- a/src/api/routes/auth/accountRoutes.js +++ b/src/api/routes/auth/accountRoutes.js
@@ -5,13 +5,22 @@ export const registerRoute = { route: '/auth/register', async onPost(req, res) { const data = await RegisterDto.create(req.body); - const registerResult = await registerUser(data); - res.send(registerResult); + await registerUser(data); + res.status(204).send(); } }; export const loginRoute = { route: '/auth/login', + async onPost(req, res) { + const data = await AuthDto.create(req.body); + const loginResult = await loginUser(data, req.headers['user-agent']); + res.send(loginResult); + } +}; + +export const logoutRoute = { + route: '/auth/logout', /** * * @param req {Request} @@ -20,8 +29,8 @@ export const loginRoute = { */ async onPost(req, res) { const data = await AuthDto.create(req.body); - const loginResult = await loginUser(data, req.headers['user-agent']); - res.send(loginResult); + // const loginResult = await deleteDevice(data, ); + res.status(204).send(); } };