mongodb

middlewares/auth-middleware.js

@@ -6,16 +6,19 @@ async function auth (req, res, next) {
   const user = req.session.user;
   const isAuth = req.session.isAuthenticated;
 
+  if (!user || !isAuth) {
+    return next();
+  }
+
   const userDoc = await db.getDb().collection('users').findOne({_id: user.id})
 
-  if (userDoc && userDoc.isAdmin) {
 
-    const isAdmin = userDoc.isAdmin;
+  const isAdmin = userDoc.isAdmin;
+
+  res.locals.user = userDoc;
+  res.locals.isAuth = isAuth;
+  res.locals.isAdmin = isAdmin;
 
-    res.locals.user = userDoc;
-    res.locals.isAuth = isAuth;
-    res.locals.isAdmin = isAdmin;
-  }