forked from acouzens/open5gs
7848b6c966
* protects db endpoints with auth data, but will require ui updates to function properly * adds an Authorization header with bearer token to all api/db/* request endpoints * force login if token doesn't exist * remove debug code
31 lines
749 B
JavaScript
31 lines
749 B
JavaScript
const express = require('express');
|
|
const auth = require('./auth');
|
|
const db = require('./db')
|
|
|
|
const router = express.Router();
|
|
|
|
const secret = process.env.JWT_SECRET_KEY || 'change-me';
|
|
const passport = require('passport');
|
|
const JWTstrategy = require('passport-jwt').Strategy;
|
|
const ExtractJWT = require('passport-jwt').ExtractJwt;
|
|
|
|
passport.use(
|
|
new JWTstrategy(
|
|
{
|
|
secretOrKey: secret,
|
|
jwtFromRequest: ExtractJWT.fromAuthHeaderWithScheme('bearer')
|
|
},
|
|
async (token, done) => {
|
|
try {
|
|
return done(null, token.user);
|
|
} catch (error) {
|
|
done(error);
|
|
}
|
|
}
|
|
)
|
|
);
|
|
|
|
router.use('/auth', auth);
|
|
router.use('/db', passport.authenticate('jwt', { session: false }), db);
|
|
|
|
module.exports = router; |