middleware/verifyToken.js

@@ -8,7 +8,8 @@ function setUser(req, decoded) {
     username: decoded.user_name,
     email: decoded.user_email,
     roleId: decoded.role_id,
-    roleName: decoded.role_name
+    roleName: decoded.role_name,
+    is_sa: decoded.is_sa
   };
 }
 
@@ -44,10 +45,10 @@ function verifyRefreshToken(req, res, next) {
     }
 
     const decoded = JWTService.verifyRefreshToken(refreshToken);
-    setUser(req, decoded);
+    req.user = decoded;
     next();
   } catch (error) {
-    next(new ErrorHandler(500, 'Refresh token verification failed'));
+    next(new ErrorHandler(401, 'Refresh token is invalid or expired'));
   }
 }