🔒 Improve JWT system

.env.local.example

@@ -1,4 +1,5 @@
 MONGODB_URI=
 MONGO_DATABASE=
 API_TOKEN=
+SECRET_JWT=
 REACT_EDITOR=

pages/api/auth/signin.ts

@@ -96,7 +96,7 @@ export default async function handler(req: NextApiRequest, res: NextApiResponse)
 			}
 
 			try {
-				token = await signJwt('SECRET_JWT', userFound);
+				token = await signJwt(userFound);
 			} catch (e) {
 				const errorMessage: string = 'Unable to create jwt';
 				console.error(`ERROR: ${errorMessage} -> ${e instanceof Error ? e.message : e}`);

src/services/jsonwebtoken.ts

@@ -1,11 +1,13 @@
-import jwt from 'jsonwebtoken';
-
-const signJwt = async (
-	key: string,
-	value: string | object,
-	options: jwt.SignOptions | undefined = undefined,
-): Promise<string> => {
-	return jwt.sign(value, key, options);
+import jwt, { JwtPayload } from 'jsonwebtoken';
+
+const SECRET_JWT: string = process.env.SECRET_JWT || 'SECRET_JWT';
+
+const signJwt = async (value: string | object, options: jwt.SignOptions | undefined = undefined): Promise<string> => {
+	return jwt.sign(value, SECRET_JWT, options);
+};
+
+const verifyJwt = async (token: string): Promise<JwtPayload | string> => {
+	return jwt.verify(token, SECRET_JWT);
 };
 
-export { signJwt };
+export { signJwt, verifyJwt };