nodeclub/api/v1/middleware.js

var UserModel  = require('../../models').User;
var eventproxy = require('eventproxy');
var validator  = require('validator');

var auth = function (req, res, next) {
  var ep = new eventproxy();
  ep.fail(next);

  var accessToken = req.body.accesstoken || req.query.accesstoken;
  accessToken = validator.trim(accessToken);

  UserModel.findOne({accessToken: accessToken}, ep.done(function (user) {
    if (!user) {
      res.status(403);
      return res.send({error_msg: 'wrong accessToken'});
    }
    if (user.is_block) {
      return res.send({error_msg: 'your account is blocked'});
    }
    req.user = user;
    next();
  }));

};

exports.auth = auth;