From a6ccb4d9edb72c184cd03ad8644af625840dcc0c Mon Sep 17 00:00:00 2001
From: MuhammadKhalilzadeh <muhammadkhalilzadeh1998@gmail.com>
Date: Thu, 4 Jul 2024 11:39:18 +0330
Subject: [PATCH] verifyOwnership added on the route

---
 Server/routes/authRoute.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Server/routes/authRoute.js b/Server/routes/authRoute.js
index 7f33381a1..e47a52cf7 100644
--- a/Server/routes/authRoute.js
+++ b/Server/routes/authRoute.js
@@ -1,7 +1,9 @@
 const router = require("express").Router();
 const { verifyJWT } = require("../middleware/verifyJWT");
+const { verifyOwnership } = require("../middleware/verifyOwnership");
 const multer = require("multer");
 const upload = multer();
+const User = require("../models/user");
 
 const {
   registerController,
@@ -24,7 +26,7 @@ router.post(
   userEditController
 );
 router.get("/users/admin", checkAdminController);
-router.delete("/user/:userId", verifyJWT, deleteUserController);
+router.delete("/user/:userId", verifyJWT, verifyOwnership(User, "userId") , deleteUserController);
 
 //Recovery routes
 router.post("/recovery/request", recoveryRequestController);