lughino / passport-unique-token Goto Github PK

I am getting a TypeError: UniqueTokenStrategy is not a constructor error when trying to use this package. My configuration is as follows:

const validationPassport = require('passport');
const UniqueTokenStrategy = require('passport-unique-token').Strategy;

const uniqueTokenStrategyOptions = {
  tokenQuery: 'sessionToken',
  tokenHeader: 'sessionToken',
  tokenField: 'sessionToken',
  tokenParams: 'sessionToken',
  failedOnMissing: true
};

validationPassport.use(new UniqueTokenStrategy(uniqueTokenStrategyOptions, function(token, done) {
  validationSessionModel.validateAdminSessionToken(token, validationSessionModel.validationSessionModel, function (err, info) {
    if (err) {
      logger.error("Authentication error with token " + token + ': ' + JSON.stringify(err));
      return done(err);
    }
    if (!token) {
      logger.warn("Session not found for token " + token);
      return done(null, false);
    }
    logger.info("Session found for token " + token);
    return done(null, info, { scope: 'all' });
  });
})
);

And the authentication is:

router.post('/create',
	authenticationHelper.validationPassport.authenticate('token'),
	validationAttemptController.create
);

Can you help me out?

I'm using this strategy for authenticating requests that possibly could not have the req.query filled. I was wondering if there a way to change this by retrieving the query fields directly parsing the URL instead of using req.query. I actually am stuck by this, in case I can make a PR.

Hi, thanks for your module.
I am going to use it in my project, but I found that it can't check token from header. Can you please add this feature?

There is a small issue on the example given:

app.put("/animals/dogs", authenticate, function (req, res) {
	   // User authenticated and can be found in req.user
});

function authenticate(req, res, next) {
    passport.authenticate("token", function (err, user, info) {
        if (err) {
            return next(err);
        }

        if (!user) {
            res.status(401).json({message: "Incorrect token credentials"});
        }

        req.user = user;
        next();
    });
}

the passport.authenticate returns a function that needs to be called. Should be:

app.put('/animals/dogs', authenticate, function (req, res) {
	   // User authenticated and can be found in req.user
});

function authenticate(req, res, next) {
    passport.authenticate('token', function (err, user, info) {
        if (err) {
            return next(err);
        }

        if (!user) {
            res.status(401).json({message: "Incorrect token credentials"});
        }

        req.user = user;
        next();
    })(req, res, next);
}

Otherwise it stops the application flow.

In order to reduce confusion in npm, would you consider deprecating this lib in favour of https://github.com/leepowellcouk/passport-token?

Would be nice have a typescript compatible package

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Rate-Limited

These updates are currently rate-limited. Click on a checkbox below to force their creation now.

• chore(deps): update dependency @types/supertest to v6
• chore(deps): update dependency eslint-config-prettier to v9
• chore(deps): update dependency eslint-plugin-prettier to v5
• chore(deps): update dependency husky to v9
• chore(deps): update dependency jest-junit to v16
• chore(deps): update dependency lint-staged to v15
• chore(deps): update dependency prettier to v3
• chore(deps): update dependency typescript to v5
• chore(deps): update jest monorepo to v29 (major) (@types/jest, jest, ts-jest)
• 🔐 Create all rate-limited PRs at once 🔐

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

• chore(deps): update node.js to v14.18.2
• chore(deps): update commitlint monorepo to v18 (major) (@commitlint/cli, @commitlint/config-conventional, @commitlint/prompt-cli)
• chore(deps): update dependency chai-passport-strategy to v3
• chore(deps): update dependency eslint to v8
• chore(deps): update typescript-eslint monorepo to v6 (major) (@typescript-eslint/eslint-plugin, @typescript-eslint/parser)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

• chore(deps): update dependency passport to ^0.6.0 [security]
• chore(deps): update dependency semantic-release to v19 [security]
• chore(deps): update dependency @semantic-release/git to v10
• chore(deps): update dependency @types/node to v20
• chore(deps): update dependency cz-customizable to v7
• Click on this checkbox to rebase all open PRs at once

Ignored or Blocked

These are blocked by an existing closed PR and will not be recreated unless you click a checkbox below.

• chore(deps): update node.js to v17

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository