'use strict';

const jwt = require('jsonwebtoken');

const PROVIDER_JWT_SECRET = process.env.PROVIDER_JWT_SECRET;

// Note: PROVIDER_JWT_SECRET validation is handled in auth.controller.js at startup

function verifyToken(token) {
  try {
    return jwt.verify(token, PROVIDER_JWT_SECRET);
  } catch (error) {
    throw new Error('Invalid token');
  }
}

module.exports = {
  verifyToken
};