auth.js

const passport = require("passport");
const { Strategy, ExtractJwt } = require("passport-jwt");
const config = require("./config");

module.exports = (app) => {
  const Users = app.models.users;
  const { jwt } = config;

  const params = {
    secretOrKey: jwt.secret,
    jwtFromRequest: ExtractJwt.fromHeader("authorization"),
  };

  passport.use(
    new Strategy(params, async (payload, done) => {
      try {
        const { id } = payload;
        const attributes = ["id", "email"];
        const options = { attributes };
        const user = await Users.findByPk(id, options);
        done(null, user);
      } catch (err) {
        done(err, null);
      }
    })
  );

  return {
    initialize: () => passport.initialize(),
    authenticate: () => passport.authenticate("jwt", { session: false }),
  };
};