diff --git a/middleware/verifyToken.js b/middleware/verifyToken.js index ab5eb21..1e38774 100644 --- a/middleware/verifyToken.js +++ b/middleware/verifyToken.js @@ -29,10 +29,15 @@ function verifyAccessToken(req, res, next) { setUser(req, decoded); next(); } catch (error) { - if (error.name === 'TokenExpiredError' || error.name === 'JsonWebTokenError') { - return next(new ErrorHandler(401, error.message)); + if (error.name === 'TokenExpiredError') { + return next(new ErrorHandler(401, 'Access token expired')); } - next(new ErrorHandler(500, 'Authenticate verification failed')); + + if (error.name === 'JsonWebTokenError') { + return next(new ErrorHandler(401, 'Invalid access token')); + } + + return next(new ErrorHandler(500, 'Internal authentication error')); } }