refactor: api routes

src/middlewares/auth.middleware.ts

@@ -0,0 +1,34 @@
+import jwt from 'jsonwebtoken'
+
+import { authConstants } from 'constants/auth'
+import { ExceptionError } from 'utils/error'
+
+import type { NextApiRequest, NextApiResponse } from 'next'
+import type { Role } from '@prisma/client'
+
+type Token = {
+  sub: string
+  role: Role
+}
+
+export async function authMiddleware(req: NextApiRequest, _res: NextApiResponse, next: () => void) {
+  const { JWT_SECRET } = authConstants
+  const token = req.headers['authorization']
+
+  if (!token) {
+    throw new ExceptionError('No token provided', 401)
+  }
+
+  const [, tokenValue] = token.split(' ')
+
+  const isValidToken = jwt.verify(tokenValue, JWT_SECRET!) as Token
+
+  if (!isValidToken) {
+    throw new ExceptionError('Invalid token', 401)
+  }
+
+  req.userId = isValidToken.sub
+  req.userRole = isValidToken.role
+
+  next()
+}