passport-http-bearer-flex
v0.0.5
Published
HTTP Bearer authentication strategy for Passport, but not only bearer.
Downloads
0
Maintainers
Readme
passport-http-bearer-flex
HTTP Bearer authentication strategy for Passport.
TLDR
This repository is forked from https://github.com/jaredhanson/passport-http-bearer
Changes in this repository
- Any scheme key is allowed for flexibility.
- Typescript support.
The Readme content from original repository
This module lets you authenticate HTTP requests using bearer tokens, as specified by RFC 6750, in your Node.js applications. Bearer tokens are typically used protect API endpoints, and are often issued using OAuth 2.0.
By plugging into Passport, bearer token support can be easily and unobtrusively integrated into any application or framework that supports Connect-style middleware, including Express.
Install
$ npm install passport-http-bearer
Usage
Configure Strategy
The HTTP Bearer authentication strategy authenticates users using a bearer
token. The strategy requires a verify
callback, which accepts that
credential and calls done
providing a user. Optional info
can be passed,
typically including associated scope, which will be set by Passport at
req.authInfo
to be used by later middleware for authorization and access
control.
passport.use(new BearerStrategy(
function(token, done) {
User.findOne({ token: token }, function (err, user) {
if (err) { return done(err); }
if (!user) { return done(null, false); }
return done(null, user, { scope: 'all' });
});
}
));
Authenticate Requests
Use passport.authenticate()
, specifying the 'bearer'
strategy, to
authenticate requests. Requests containing bearer tokens do not require session
support, so the session
option can be set to false
.
For example, as route middleware in an Express application:
app.get('/profile',
passport.authenticate('bearer', { session: false }),
function(req, res) {
res.json(req.user);
});
Issuing Tokens
Bearer tokens are typically issued using OAuth 2.0. OAuth2orize is a toolkit for implementing OAuth 2.0 servers and issuing bearer tokens. Once issued, this module can be used to authenticate tokens as described above.
Examples
For a complete, working example, refer to the Bearer example.
Related Modules
- OAuth2orize — OAuth 2.0 authorization server toolkit
Sponsorship
Passport is open source software. Ongoing development is made possible by generous contributions from individuals and corporations. To learn more about how you can help keep this project financially sustainable, please visit Jared Hanson's page on Patreon.
License
Copyright (c) 2011-2013 Jared Hanson <http://jaredhanson.net/>