Added new check in verifyRToken route

devclub-iitd · Aug 25, 2021 · cbcea9b · cbcea9b
1 parent cd031ee
commit cbcea9b
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/src/routes/auth.js b/src/routes/auth.js
@@ -446,6 +446,18 @@ router.get('/verifyRToken', async (req, res) => {
         }
         const user = await verifyToken(req, res);
         const clientId = await rtoken.hget(requestToken.toString(), 'cId');
+        const client = await Client.findById(clientId);
+
+        if (!client) {
+            return res.status(400).json({
+                err: true,
+                msg: 'No client found',
+            });
+        }
+
+        verify(requestToken, client.access_token, {
+            algorithms: ['HS256'],
+        });
         rtoken.hmset(requestToken.toString(), {
             cId: clientId,
             uId: user._id.toString(),