Hire builders,
not prompters.

1// auth-middleware.ts
2import { verifyToken } from "@/lib/jwt";
3
4export async function authMiddleware(req, res, next) {
5  const token = req.headers.authorization?.split(" ")[1];
6  if (!token) return res.status(401).json({ error: "missing token" });
7
8  try {
9    const claims = await verifyToken(token);
10    req.user = claims;
11    return next();
12  } catch (err) {
13    if (err.code === "TOKEN_EXPIRED") {
14      return res.status(401).json({ error: "expired token" });
15    }
16    return res.status(401).json({ error: "invalid token" });
17  }
18}