1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
const Passport = require("passport");
const jwt = require("passport-jwt");
function cookieExtractor(req) {
if (req && req.cookies) {
return req.cookies["token"];
}
return null;
}
passport = Passport.use(
new jwt.Strategy(
{
jwtFromRequest: jwt.ExtractJwt.fromExtractors([
jwt.ExtractJwt.fromAuthHeaderAsBearerToken(),
cookieExtractor
]),
secretOrKey: config.jwt
},
async (payload, next) => {
const { username } = payload;
try {
let user = await db.User.findOne({
where: { username },
include: { model: db.Account, as: "account" }
});
if (user.locked) throw new Error("account is locked");
next(null, user);
} catch (e) {
l.error("problem logging in", e);
next(null, { username: "guest" });
}
}
)
);
auth = passport.authenticate("jwt", { session: false });
optionalAuth = function(req, res, next) {
passport.authenticate("jwt", { session: false }, function(err, user, info) {
req.user = user;
next();
})(req, res, next);
};
adminAuth = (req, res, next) => {
passport.authenticate("jwt", { session: false }, function(err, user, info) {
if (!(user && user.admin)) throw new Error("restricted");
req.user = user;
next();
})(req, res, next);
};
app.use(passport.initialize());
|
