From 7da6c6a8e4a3590dfb8569b9fc24b4054552c96f Mon Sep 17 00:00:00 2001
From: eug-vs <eug-vs@keemail.me>
Date: Sun, 15 Nov 2020 03:46:51 +0300
Subject: feat: setup authentication

---
 src/services/users/user.hooks.js   | 21 +++++++++++++++++++++
 src/services/users/user.service.js |  6 +++++-
 2 files changed, 26 insertions(+), 1 deletion(-)
 create mode 100644 src/services/users/user.hooks.js

(limited to 'src/services/users')

diff --git a/src/services/users/user.hooks.js b/src/services/users/user.hooks.js
new file mode 100644
index 0000000..daeda68
--- /dev/null
+++ b/src/services/users/user.hooks.js
@@ -0,0 +1,21 @@
+const { hooks } = require ('@feathersjs/authentication-local');
+const { NotAuthenticated } = require('@feathersjs/errors');
+
+const compareUser = async context => {
+  if (context.id !== context.params.user._id.toString()) {
+    throw new NotAuthenticated('You can only PATCH/UPDATE your own user!');
+  }
+  return context;
+};
+
+
+module.exports = {
+  after: {
+    all: hooks.protect('password')
+  },
+  before: {
+    patch: [compareUser],
+    update: [compareUser]
+  }
+};
+
diff --git a/src/services/users/user.service.js b/src/services/users/user.service.js
index 67f2ae6..afb3b9e 100644
--- a/src/services/users/user.service.js
+++ b/src/services/users/user.service.js
@@ -1,7 +1,11 @@
 const service = require('feathers-mongoose');
 const Model = require('./user.model.js');
+const hooks = require('./user.hooks.js');
 
 const UserService = service({ Model })
 
-module.exports = app => app.use('/users', UserService);
+module.exports = app => {
+  app.use('/users', UserService);
+  app.service('users').hooks(hooks);
+};
 
-- 
cgit v1.2.3