1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
const Passport = require("passport");
const jwt = require("passport-jwt");
const { Op } = require("sequelize");
function cookieExtractor(req) {
if (req && req.cookies) {
return req.cookies["token"];
}
return null;
}
passport = Passport.use(
new jwt.Strategy(
{
jwtFromRequest: jwt.ExtractJwt.fromExtractors([
jwt.ExtractJwt.fromAuthHeaderAsBearerToken(),
cookieExtractor
]),
secretOrKey: config.jwt
},
async (payload, next) => {
try {
let { username } = payload;
let user = await db.User.findOne({
where: {
username: { [Op.or]: [username, username.replace(/ /g, "")] }
},
include: { model: db.Account, as: "account" }
});
if (user.locked) throw new Error("account is locked");
next(null, user);
} catch (e) {
if (!e.message.includes("locked")) {
console.log(e);
l.error("problem logging in", e);
}
next(null, { username: "guest" });
}
}
)
);
auth = passport.authenticate("jwt", { session: false });
optionalAuth = function(req, res, next) {
passport.authenticate("jwt", { session: false }, function(err, user, info) {
req.user = user;
next();
})(req, res, next);
};
adminAuth = ah((req, res, next) => {
passport.authenticate("jwt", { session: false }, function(err, user, info) {
if (!(user && user.admin)) return res.status(401).send("Unauthorized")
req.user = user;
next();
})(req, res, next);
});
app.use(passport.initialize());
|
