Fixing Issue of Cookies

app.js

@@ -13,18 +13,17 @@ const app = express();
 
 app.use(
   cors({
-    origin: ["http://localhost:3000"],
+    origin: "http://localhost:3000",
     credentials: true,
   })
 );
 app.use(express.json());
-
+app.use(cookieParser());
 app.use(
   express.urlencoded({
     extended: true,
   })
 );
-app.use(cookieParser("This_Is_My_Super_Secret"));
 
 // app.use((req, res, next) => {
 //   res.setHeader("Access-Control-Allow-Credentials", true);

client/src/components/Admin/Users/Users.jsx

@@ -20,12 +20,10 @@ const Users = () => {
   const navigate = useNavigate();
 
   const fetchUserData = async () => {
-    const token = localStorage.getItem('authToken');
     const res = await fetch(`${API_ENDPOINT}/getAllUsers`, {
       method: 'GET',
       headers: {
         'Content-Type': 'application/json',
-        Authorization: `Bearer ${token}`,
       },
       credentials: 'include',
     });

client/src/components/Auth/Login.jsx

@@ -29,15 +29,13 @@ const Login = () => {
         headers: {
           'Content-Type': 'application/json',
         },
+        credentials: 'include',
         body: JSON.stringify({ email, password }),
       });
 
       const data = await res.json();
 
-      console.log(data);
-
       if (data?.success) {
-        localStorage.setItem('authToken', data?.token);
         localStorage.setItem('isAuth', true, 3600000);
         localStorage.setItem(
           'userData',

client/src/components/Auth/Register.jsx

@@ -52,13 +52,13 @@ const Register = () => {
         headers: {
           'Content-Type': 'application/json',
         },
+        credentials: 'include',
         body: JSON.stringify({ email, name, password }),
       });
 
       const data = await res.json();
 
       if (data?.success) {
-        localStorage.setItem('authToken', data?.token);
         localStorage.setItem('isAuth', true, 3600000);
         localStorage.setItem(
           'userData',

middlewares/Auth.js

@@ -4,8 +4,7 @@ import ErrorHandler from "../utils/ErrorHandler.js";
 import { User } from "../models/User.js";
 
 export const isAuthenticated = catchAsyncError(async (req, res, next) => {
-  const token =
-    req.header("Authorization")?.replace("Bearer ", "") || req.cookies?.token;
+  const token = req.cookies?.authToken;
   if (!token) return next(new ErrorHandler("Not Logged in", 401));
   const decoded = jwt.verify(token, process.env.JWT_SECRET);
   req.user = await User.findById(decoded._id);

middlewares/adminAuth.js

@@ -4,8 +4,9 @@ import ErrorHandler from "../utils/ErrorHandler.js";
 import { User } from "../models/User.js";
 
 export const isAdminAuthenticated = catchAsyncError(async (req, res, next) => {
-  const token =
-    req.header("Authorization")?.replace("Bearer ", "") || req.cookies?.token;
+  const token = req.cookies?.authToken;
+
+  console.log(req.cookies);
   if (!token) return next(new ErrorHandler("Not Logged in", 401));
   const decoded = jwt.verify(token, process.env.JWT_SECRET);
 

package.json

@@ -4,6 +4,7 @@
   "description": "",
   "type": "module",
   "main": "server.js",
+  "proxy":"http://localhost:4000",
   "scripts": {
     "test": "echo \"Error: no test specified\" && exit 1",
     "start": "nodemon server.js"

utils/sendToken.js

@@ -1,16 +1,18 @@
 export const sendToken = (res, user, message, statusCode = 200) => {
-  const token = user.getJWTToken();
-  const options = {
-    expires: new Date(Date.now() + 15 * 24 * 60 * 60 * 1000), // 15 days token valid
-    httpOnly: true,
-    secure: true,
-    sameSite: true,
-  };
-
-  res.status(statusCode).cookie("token", token, options).json({
-    success: true,
-    message,
-    user,
-    token,
-  });
+  try {
+    const token = user.getJWTToken();
+    const options = {
+      expires: new Date(Date.now() + 15 * 24 * 60 * 60 * 1000), // 15 days token valid
+      httpOnly: true,
+      secure: true,
+      // sameSite: true,
+    };
+    res.status(statusCode).cookie("authToken", token, options).json({
+      success: true,
+      message,
+      user,
+    });
+  } catch (error) {
+    console.log(error);
+  }
 };