First, I just wanna say, I love Lumie, really great work. I m a bit

How to integrerat permissions with express-jwt? about lumie HOT 1 CLOSED

Livog commented on May 29, 2024

How to integrerat permissions with express-jwt?

from lumie.

Comments (1)

Livog commented on May 29, 2024

I think I found a solution. Don't think I can use the express-jwt middleware, but could be wrong. Here is how I solved it.

modules/setToken.js

module.exports = (req, res, next) => {
  let header = req.headers['authorization'];
  if (typeof header !== 'undefined') {
    let bearer = header.split(' ');
    let token = bearer[1];
    req.token = token;
  }
  next()
};

modules/setUser.js

const jwt = require('jsonwebtoken')
module.exports = (req, res, next) => {
  jwt.verify(req.token, 'trickytogetthisone', (err, authorizedData) => {
    if (err) {
      req.user = null;
    } else {
      req.user = authorizedData;
    }
    next()
  })
}

And then right before Lumid.load I add

app.use(require('./modules/setToken'));
app.use(require('./modules/setUser'));
Lumie.load(app, { //etc

Doing like this permissions can look the same. Since req.user will only be set if the token has been verified.

const levelFcts = {
  public: (req, res, next) => next(),
  member: (req, res, next) => (req.user ? next() : res.sendStatus(401))
};

module.exports = level => (req, res, next) => levelFcts[level](req, res, next);

Maybe this is not so advanced but if someone want the solution, it's in one place.

from lumie.

Recommend Projects