route protect

lib/auth.ts

@@ -0,0 +1,33 @@
+import jwt from 'jsonwebtoken'
+import { NextApiRequest, NextApiResponse } from 'next'
+import prisma from './prisma'
+
+export const validateRoute = (handler) => {
+  return async (req: NextApiRequest, res: NextApiResponse) => {
+    const token = req.cookies.TRAX_ACCESS_TOKEN
+
+    if (token) {
+      let user
+
+      try {
+        const { id } = jwt.verify(token, 'hello')
+        user = await prisma.user.findUnique({
+          where: { id },
+        })
+
+        if (!user) {
+          throw new Error('Not real user')
+        }
+      } catch (error) {
+        res.status(401)
+        res.json({ error: 'Not Authorizied' })
+        return
+      }
+
+      return handler(req, res, user)
+    }
+
+    res.status(401)
+    res.json({ error: 'Not Authorizied' })
+  }
+}

pages/api/me.ts

@@ -0,0 +1,5 @@
+import { validateRoute } from '../../lib/auth'
+
+export default validateRoute((req, res, user) => {
+  res.json(user)
+})