jwt npm

1$ npm install jsonwebtoken

1const jwt = require("jsonwebtoken")
2
3const jwtKey = "my_secret_key"
4const jwtExpirySeconds = 300
5
6const users = {
7	user1: "password1",
8	user2: "password2",
9}
10
11const signIn = (req, res) => {
12	// Get credentials from JSON body
13	const { username, password } = req.body
14	if (!username || !password || users[username] !== password) {
15		// return 401 error is username or password doesn't exist, or if password does
16		// not match the password in our records
17		return res.status(401).end()
18	}
19
20	// Create a new token with the username in the payload
21	// and which expires 300 seconds after issue
22	const token = jwt.sign({ username }, jwtKey, {
23		algorithm: "HS256",
24		expiresIn: jwtExpirySeconds,
25	})
26	console.log("token:", token)
27
28	// set the cookie as the token string, with a similar max age as the token
29	// here, the max age is in milliseconds, so we multiply by 1000
30	res.cookie("token", token, { maxAge: jwtExpirySeconds * 1000 })
31	res.end()
32}

1// JWT MIDDLEWARE
2const jwt = require('jsonwebtoken')
3const httpError = require('http-errors')
4
5module.exports = (req, res, next) => {
6  try {
7    const tokenHeader = req.headers.authorization.split('Bearer ')[1]
8    const decoded = jwt.verify(tokenHeader, process.env.ACCESS_TOKEN_SECRET)
9    req.user = decoded
10    next()
11  } catch (err) {
12    next(httpError(401))
13  }
14}
15
16// ROUTE LOGIN
17app.get('/protect', authJwt, (req, res) => {
18  console.log(req.user)
19  res.send('aim in proteced route')
20})
21
22app.post('/login', (req, res) => {
23  const bodyPayload = {
24    id: Date.now(),
25    username: req.body.username
26  }
27  const token = signAccessToken(res, bodyPayload)
28  return res.status(200).json(token)
29})
30
31app.post('/refresh-token', (req, res) => {
32  const refreshToken = signRefreshToken(req)
33  res.status(200).json(refreshToken)
34  res.end()
35})
36
37// JWT HELPER
38const jwt = require('jsonwebtoken')
39const httpError = require('http-errors')
40
41exports.signAccessToken = (res, payload) => {
42  try {
43    if (payload) {
44      const accessToken = jwt.sign({ ...payload }, process.env.ACCESS_TOKEN_SECRET, { expiresIn: '1m' })
45      const refreshToken = jwt.sign({ ...payload }, process.env.REFRESH_TOKEN_SECRET, { expiresIn: '90d' })
46      res.cookie('refreshToken', `${refreshToken}`, { expired: 86400 * 90 })
47      return { accessToken, refreshToken }
48    }
49  } catch (err) {
50    return httpError(500, err)
51  }
52}
53
54exports.signRefreshToken = (req) => {
55  try {
56    const getToken = req.cookies.refreshToken
57    if (getToken) {
58      const { id, username } = jwt.verify(getToken, process.env.REFRESH_TOKEN_SECRET)
59      const accesssToken = jwt.sign({ id, username }, process.env.ACCESS_TOKEN_SECRET, { expiresIn: '1m' })
60      return { accesssToken }
61    }
62  } catch (err) {
63    return httpError(401, err)
64  }
65}
66

1$ npm install jwt-simple
2

1RSASHA256(
2  base64UrlEncode(header) + "." +
3  base64UrlEncode(payload),
4  ,
5  
6)

1jwt.sign({  exp: Math.floor(Date.now() / 1000) + (60 * 60),  data: 'foobar'}, 'secret');