Merge pull request #2 from tar-aldev/dev

updated gitignore

.env.example

@@ -0,0 +1,7 @@
+PORT = 8000
+MONGODB_URI="mongodb://localhost/blog"
+ACCESS_TOKEN_SECRET=
+REFRESH_TOKEN_SECRET=
+ACCESS_TOKEN_EXP=300
+# 15 days
+REFRESH_TOKEN_EXP=1296000

.gitignore

@@ -1,3 +1,4 @@
 node_modules/
 credentials.json
 .env
+.idea/

middleware/withAuth.js

@@ -5,14 +5,14 @@ module.exports = (error = true) => (req, res, next) => {
   const { authorization } = req.headers;
   try {
     const token = authorization.split(" ")[1];
-    req.jwtPayload = jwt.verify(token, "secret");
+    req.jwtPayload = jwt.verify(token, process.env.ACCESS_TOKEN_SECRET);
     next();
   } catch (e) {
     console.log("error token decode", e);
     if (error) {
-      return res.status(401).json({
-        message: e.message || "Not authenticated!",
-      });
+      return res
+        .status(401)
+        .json({ message: e.message || "Not authenticated!" });
     }
     req.jwtPayload = {};
     next();

modules/auth/auth.controller.js

@@ -1,13 +1,12 @@
 const User = require("../users/users.model");
-const Token = require("./tokens.model");
 const {
   signJWT,
   getUrlGoogle,
   getGoogleAccountByCode,
   generateNickname,
 } = require("../../utils/index");
 
-/* 
+/*
   acces token - short term of expiration short validity period
   refresh token - used to generate access token.
   Used only once - after this old refresh token is deleted and new one is generated
@@ -78,7 +77,7 @@ module.exports = {
     }
     /* let user = await User.findOne({
       gmailId: userGmailId,
-    }); */
+    });
     /* if (!user) {
       const newUser = new User({
         gmailId: userGmailId,