diff --git a/api/utils/verifyToken.js b/api/utils/verifyToken.js index 57e3ee56ef..d35124ca5d 100644 --- a/api/utils/verifyToken.js +++ b/api/utils/verifyToken.js @@ -15,7 +15,9 @@ export const verifyToken = (req, res, next) => { }; export const verifyUser = (req, res, next) => { - verifyToken(req, res, next, () => { + verifyToken(req, res, (err) => { + if(err) return next(err); + if (req.user.id === req.params.id || req.user.isAdmin) { next(); } else { @@ -25,11 +27,13 @@ export const verifyUser = (req, res, next) => { }; export const verifyAdmin = (req, res, next) => { - verifyToken(req, res, next, () => { + verifyToken(req, res, (err) => { + if(err) return next(err); + if (req.user.isAdmin) { next(); } else { return next(createError(403, "You are not authorized!")); } }); -}; +}; \ No newline at end of file