change to use session for auth

+ replace BearerAuth to cookieAuth in swagger
+ add swagger.yaml to nodemon watch list

server/src/api/routes/auth.js

@@ -2,20 +2,24 @@ import { Router } from 'express'
 import passport from 'passport'
 
 import {
-  issueToken,
   register,
   checkUsername,
+  logout,
 } from '../controllers/authController.js'
 
 const router = Router()
 
 router.post(
   '/login',
-  passport.authenticate('local', { session: false, failWithError: true }),
-  issueToken
+  passport.authenticate('local', { failureMessage: true }),
+  (req, res) => {
+    res.json({ message: 'success' })
+  }
 )
 
-router.post('/register', register, issueToken)
+router.post('/register', register)
+
+router.post('/logout', logout)
 
 router.get('/check', checkUsername)
 

server/src/api/routes/index.js

@@ -6,6 +6,7 @@ import commands from './commands.js'
 import authRouter from './auth.js'
 
 const router = Router()
+router.use(passport.authenticate('session'))
 
 router.get('/', (req, res) => {
   res.send('Hello API!')
@@ -13,15 +14,11 @@ router.get('/', (req, res) => {
 
 router.use('/auth', authRouter)
 router.use('/quests', quests)
-router.use(
-  '/sessions',
-  passport.authenticate('jwt', { session: false, failWithError: true }),
-  sessions
-)
-router.use(
-  '/commands',
-  passport.authenticate('jwt', { session: false, failWithError: true }),
-  commands
-)
+
+const authZone = Router()
+authZone.use('/sessions', sessions)
+authZone.use('/commands', commands)
+
+router.use(authZone)
 
 export default router