Security Review

Review
this
Node
.
js authentication middleware
for
security vulnerabilities
:
const
auth
=
async
(
req
,
res
,
next
)
=>
{
try
{
const
token
=
req
.
header
(
'Authorization'
)
.
replace
(
'Bearer '
,
''
)
const
decoded
=
jwt
.
verify
(
token
,
process
.
env
.
JWT_SECRET
)
const
user
=
await
User
.
findOne
(
{
_id
:
decoded
.
_id
,
'tokens.token'
:
token
}
)
if
(
!
user
)
throw
new
Error
(
)
req
.
user
=
user
next
(
)
}
catch
(
e
)
{
res
.
status
(
401
)
.
send
(
{
error
:
'Please authenticate.'
}
)
}
}