function auth(req, res, next) { var token = req.headers.authorization; if (token) { token = token.replace("Bearer ", ""); jwt.verify(token, "secret123", function (err, decoded) { if (err) { res.status(401).send("bad"); } else { req.user = decoded; next(); } }); } else { next(); } }