diff --git a/server/controllers/auth/login.js b/server/controllers/auth/login.js index b524776..2c1ecad 100644 --- a/server/controllers/auth/login.js +++ b/server/controllers/auth/login.js @@ -43,7 +43,7 @@ async function login(request, response, next) { delete foundAccount.password // Generate access token - const token = signToken({uid: foundAccount._id}) + const token = signToken({uid: foundAccount._id, role: foundAccount.role}) response.status(200).json({ message: 'Succesfully logged-in', diff --git a/server/controllers/auth/register.js b/server/controllers/auth/register.js index 41e588e..b62d339 100644 --- a/server/controllers/auth/register.js +++ b/server/controllers/auth/register.js @@ -44,7 +44,7 @@ async function register(request, response, next) { delete newAccount.password // Generate access token - const token = signToken({uid: newAccount._id}) + const token = signToken({uid: newAccount._id, role: newAccount.role}) response.status(201).json({ message: 'Succesfully registered', diff --git a/server/models/Account.js b/server/models/Account.js index 716c8de..3725823 100644 --- a/server/models/Account.js +++ b/server/models/Account.js @@ -17,6 +17,12 @@ const instance = new mongoose.Schema( type: String, required: true, }, + role: { + type: String, + required: true, + enum: ['user', 'admin'], + default: 'user', + }, }, { timestamps: true,