updateRequestStatus: (parent, { id, isApproved, token }) => { //verify and decode a token // console.log(validToken.verify(token)); const isValidToken = validToken.verify(token); if(isValidToken && isValidToken.isAdmin){ console.log("valid and isAdmin"); //check if registered user and isAdmin return User.exists({ _id: isValidToken._id }) .then(()=> { let updates = { isApproved, approverId: isValidToken._id, dateApprovedOrDenied: new Date() } return Request.findByIdAndUpdate(id, { isApproved, dateApproved, approverId }, { new: true }) }) .catch(error=>{ console.log(error); return null; }) } else { console.log("invalid token or not admin"); return null; } },