text: 'use strict';
  
  const base64 = require('base-64');
  const User = require('../models/users.js');
  
  module.exports = async (req, res, next) => {
    console.log('req.headers.authorization', req.headers.authorization);
  
    if (!req.headers.authorization) { return _authError(); }
  
    let basic = req.headers.authorization.split(' ').pop();
  
    let [user, pass] = base64.decode(basic).split(':');
  
    try {
      req.user = await User.authenticateBasic(user, pass)
      next();
    } catch (e) {
      res.status(403).send('Invalid Login');
    }
  }
  