-
Notifications
You must be signed in to change notification settings - Fork 208
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: jannyHou <[email protected]> Co-authored-by: Nora <[email protected]> Co-authored-by: Biniam <[email protected]> Co-authored-by: Janny <[email protected]>
- Loading branch information
3 people
committed
Jan 24, 2019
1 parent
6700975
commit 6d2c0f2
Showing
15 changed files
with
2,388 additions
and
2,482 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,39 @@ | ||
| // Copyright IBM Corp. 2018, 2019. All Rights Reserved. | ||
| // Node module: @loopback4-example-shopping | ||
| // This file is licensed under the MIT License. | ||
| // License text available at https://opensource.org/licenses/MIT | ||
|
|
||
| const jwt = require('jsonwebtoken'); | ||
| import {promisify} from 'util'; | ||
| const verifyAsync = promisify(jwt.verify); | ||
| // Consider turn it to a binding | ||
| const SECRET = 'secretforjwt'; | ||
| import {Request, HttpErrors} from '@loopback/rest'; | ||
| import {UserProfile} from '@loopback/authentication'; | ||
| import * as _ from 'lodash'; | ||
| import {AuthenticationStrategy} from './authentication.strategy'; | ||
|
|
||
| export class JWTStrategy implements AuthenticationStrategy { | ||
| async authenticate(request: Request): Promise<UserProfile | undefined> { | ||
| let token = request.query.access_token || request.headers['authorization']; | ||
| if (!token) throw new HttpErrors.Unauthorized('No access token found!'); | ||
|
|
||
| if (token.startsWith('Bearer ')) { | ||
| token = token.slice(7, token.length); | ||
| } | ||
|
|
||
| try { | ||
| const decoded = await verifyAsync(token, SECRET); | ||
| let user = _.pick(decoded, ['id', 'email', 'firstName']); | ||
| (user as UserProfile).name = user.firstName; | ||
| delete user.firstName; | ||
| return user; | ||
| } catch (err) { | ||
| Object.assign(err, { | ||
| code: 'INVALID_ACCESS_TOKEN', | ||
| statusCode: 401, | ||
| }); | ||
| throw err; | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,20 @@ | ||
| // Copyright IBM Corp. 2018, 2019. All Rights Reserved. | ||
| // Node module: @loopback4-example-shopping | ||
| // This file is licensed under the MIT License. | ||
| // License text available at https://opensource.org/licenses/MIT | ||
|
|
||
| import {UserProfile} from '@loopback/authentication'; | ||
| import {Request} from '@loopback/rest'; | ||
|
|
||
| /** | ||
| * An interface describes the common authentication strategy. | ||
| * | ||
| * An authentication strategy is usually a class with an | ||
| * authenticate method that verifies a user's identity and | ||
| * returns the corresponding user profile. | ||
| * | ||
| * Please note this file should be moved to @loopback/authentication | ||
| */ | ||
| export interface AuthenticationStrategy { | ||
| authenticate(request: Request): Promise<UserProfile | undefined>; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| // Copyright IBM Corp. 2017,2018. All Rights Reserved. | ||
| // Node module: @loopback/authentication | ||
| // This file is licensed under the MIT License. | ||
| // License text available at https://opensource.org/licenses/MIT | ||
|
|
||
| import {Getter, Provider, Setter, inject} from '@loopback/context'; | ||
| import {Request} from '@loopback/rest'; | ||
| import {AuthenticationBindings} from '@loopback/authentication'; | ||
| import {AuthenticateFn, UserProfile} from '@loopback/authentication'; | ||
| import {AuthenticationStrategy} from '../authentication-strategies/authentication.strategy'; | ||
|
|
||
| /** | ||
| * @description Provider of a function which authenticates | ||
| * @example `context.bind('authentication_key') | ||
| * .toProvider(AuthenticateActionProvider)` | ||
| */ | ||
| export class AuthenticateActionProvider implements Provider<AuthenticateFn> { | ||
| constructor( | ||
| // The provider is instantiated for Sequence constructor, | ||
| // at which time we don't have information about the current | ||
| // route yet. This information is needed to determine | ||
| // what auth strategy should be used. | ||
| // To solve this, we are injecting a getter function that will | ||
| // defer resolution of the strategy until authenticate() action | ||
| // is executed. | ||
| @inject.getter(AuthenticationBindings.STRATEGY) | ||
| readonly getStrategy: Getter<AuthenticationStrategy>, | ||
| @inject.setter(AuthenticationBindings.CURRENT_USER) | ||
| readonly setCurrentUser: Setter<UserProfile>, | ||
| ) {} | ||
|
|
||
| /** | ||
| * @returns authenticateFn | ||
| */ | ||
| value(): AuthenticateFn { | ||
| return request => this.action(request); | ||
| } | ||
|
|
||
| /** | ||
| * The implementation of authenticate() sequence action. | ||
| * @param request The incoming request provided by the REST layer | ||
| */ | ||
| async action(request: Request): Promise<UserProfile | undefined> { | ||
| const strategy = await this.getStrategy(); | ||
| if (!strategy) { | ||
| // The invoked operation does not require authentication. | ||
| return undefined; | ||
| } | ||
| if (!strategy.authenticate) { | ||
| throw new Error('invalid strategy parameter'); | ||
| } | ||
| const user = await strategy.authenticate(request); | ||
| if (user) this.setCurrentUser(user); | ||
| return user; | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| // Copyright IBM Corp. 2018, 2019. All Rights Reserved. | ||
| // Node module: @loopback4-example-shopping | ||
| // This file is licensed under the MIT License. | ||
| // License text available at https://opensource.org/licenses/MIT | ||
|
|
||
| export * from './strategy.resolver.provider'; | ||
| export * from './custom.authentication.provider'; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,32 @@ | ||
| // Copyright IBM Corp. 2018. All Rights Reserved. | ||
| // Node module: @loopback4-example-shopping | ||
| // This file is licensed under the MIT License. | ||
| // License text available at https://opensource.org/licenses/MIT | ||
|
|
||
| import {Provider, ValueOrPromise} from '@loopback/core'; | ||
| import {inject} from '@loopback/context'; | ||
| import { | ||
| AuthenticationBindings, | ||
| AuthenticationMetadata, | ||
| } from '@loopback/authentication'; | ||
| import {JWTStrategy} from '../authentication-strategies/JWT.strategy'; | ||
| export class StrategyResolverProvider | ||
| implements Provider<JWTStrategy | undefined> { | ||
| constructor( | ||
| @inject(AuthenticationBindings.METADATA) | ||
| private metadata: AuthenticationMetadata, | ||
| ) {} | ||
| value(): ValueOrPromise<JWTStrategy | undefined> { | ||
| if (!this.metadata) { | ||
| return; | ||
| } | ||
|
|
||
| const name = this.metadata.strategy; | ||
| // This should be extensible | ||
| if (name === 'jwt') { | ||
| return new JWTStrategy(); | ||
| } else { | ||
| throw new Error(`The strategy ${name} is not available.`); | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.