Added auth middleware. Added access control to apps

middleware/auth.js

@@ -0,0 +1,25 @@
+const jwt = require('jsonwebtoken');
+
+const auth = (req, res, next) => {
+  const authHeader = req.header('Authorization');
+  let token;
+  let tokenIsValid = false;
+
+  if (authHeader && authHeader.startsWith('Bearer ')) {
+    token = authHeader.split(' ')[1];
+  }
+
+  if (token) {
+    try {
+      jwt.verify(token, process.env.SECRET);
+    } finally {
+      tokenIsValid = true;
+    }
+  }
+
+  req.isAuthenticated = tokenIsValid;
+
+  next();
+};
+
+module.exports = auth;