-
Notifications
You must be signed in to change notification settings - Fork 208
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Signed-off-by: jannyHou <[email protected]> Co-authored-by: Nora <[email protected]> Co-authored-by: Biniam <[email protected]> Co-authored-by: Janny <[email protected]>
- Loading branch information
3 people
committed
Jan 15, 2019
1 parent
6700975
commit f823a7c
Showing
13 changed files
with
2,339 additions
and
1,678 deletions.
There are no files selected for viewing
Large diffs are not rendered by default.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,36 @@ | ||
| const jwt = require('jsonwebtoken'); | ||
| import {promisify} from 'util'; | ||
| const verifyAsync = promisify(jwt.verify); | ||
| // Consider turn it to a binding | ||
| const SECRET = 'secretforjwt'; | ||
| import {Request, HttpErrors} from '@loopback/rest'; | ||
| import {UserProfile} from '@loopback/authentication'; | ||
| import * as _ from 'lodash'; | ||
| import {AuthenticationStrategy} from './authentication.strategy'; | ||
|
|
||
| export class JWTStrategy implements AuthenticationStrategy { | ||
| async authenticate(request: Request): Promise<UserProfile | undefined> { | ||
| // there is a discussion regarding how to retrieve the token, | ||
| // see comment https://github.com/strongloop/loopback-next/issues/1997#issuecomment-451054806 | ||
| let token = request.query.token || request.headers['authorization']; | ||
| if (!token) throw new HttpErrors.Unauthorized('Token not found!'); | ||
|
|
||
| if (token.startsWith('Bearer ')) { | ||
| token = token.slice(7, token.length); | ||
| } | ||
|
|
||
| try { | ||
| const decoded = await verifyAsync(token, SECRET); | ||
| let user = _.pick(decoded, ['id', 'email', 'firstName']); | ||
| (user as UserProfile).name = user.firstName; | ||
| delete user.firstName; | ||
| return user; | ||
| } catch (err) { | ||
| Object.assign(err, { | ||
| code: 'INVALID_ACCESS_TOKEN', | ||
| statusCode: 401, | ||
| }); | ||
| throw err; | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,15 @@ | ||
| import {UserProfile} from '@loopback/authentication'; | ||
| import {Request} from '@loopback/rest'; | ||
|
|
||
| /** | ||
| * An interface describes the common authentication strategy. | ||
| * | ||
| * An authentication strategy is usually a class with an | ||
| * authenticate method that verifies a user's identity and | ||
| * returns the corresponding user profile. | ||
| * | ||
| * Please note this file should be moved to @loopback/authentication | ||
| */ | ||
| export interface AuthenticationStrategy { | ||
| authenticate(request: Request): Promise<UserProfile | undefined>; | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,56 @@ | ||
| // Copyright IBM Corp. 2017,2018. All Rights Reserved. | ||
| // Node module: @loopback/authentication | ||
| // This file is licensed under the MIT License. | ||
| // License text available at https://opensource.org/licenses/MIT | ||
|
|
||
| import {Getter, Provider, Setter, inject} from '@loopback/context'; | ||
| import {Request} from '@loopback/rest'; | ||
| import {AuthenticationBindings} from '@loopback/authentication'; | ||
| import {AuthenticateFn, UserProfile} from '@loopback/authentication'; | ||
| import {AuthenticationStrategy} from '../authentication-strategies/authentication.strategy'; | ||
|
|
||
| /** | ||
| * @description Provider of a function which authenticates | ||
| * @example `context.bind('authentication_key') | ||
| * .toProvider(AuthenticateActionProvider)` | ||
| */ | ||
| export class AuthenticateActionProvider implements Provider<AuthenticateFn> { | ||
| constructor( | ||
| // The provider is instantiated for Sequence constructor, | ||
| // at which time we don't have information about the current | ||
| // route yet. This information is needed to determine | ||
| // what auth strategy should be used. | ||
| // To solve this, we are injecting a getter function that will | ||
| // defer resolution of the strategy until authenticate() action | ||
| // is executed. | ||
| @inject.getter(AuthenticationBindings.STRATEGY) | ||
| readonly getStrategy: Getter<AuthenticationStrategy>, | ||
| @inject.setter(AuthenticationBindings.CURRENT_USER) | ||
| readonly setCurrentUser: Setter<UserProfile>, | ||
| ) {} | ||
|
|
||
| /** | ||
| * @returns authenticateFn | ||
| */ | ||
| value(): AuthenticateFn { | ||
| return request => this.action(request); | ||
| } | ||
|
|
||
| /** | ||
| * The implementation of authenticate() sequence action. | ||
| * @param request The incoming request provided by the REST layer | ||
| */ | ||
| async action(request: Request): Promise<UserProfile | undefined> { | ||
| const strategy = await this.getStrategy(); | ||
| if (!strategy) { | ||
| // The invoked operation does not require authentication. | ||
| return undefined; | ||
| } | ||
| if (!strategy.authenticate) { | ||
| throw new Error('invalid strategy parameter'); | ||
| } | ||
| const user = await strategy.authenticate(request); | ||
| if (user) this.setCurrentUser(user); | ||
| return user; | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,2 @@ | ||
| export * from './strategy.resolver.provider'; | ||
| export * from './custom.authentication.provider'; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,28 @@ | ||
| import {Provider, ValueOrPromise} from '@loopback/core'; | ||
| import {inject} from '@loopback/context'; | ||
| import { | ||
| AuthenticationBindings, | ||
| AuthenticationMetadata, | ||
| } from '@loopback/authentication'; | ||
| import {JWTStrategy} from '../authentication-strategies/JWT.strategy'; | ||
| // import {JWTStrategy} from '@loopback/authentication'; | ||
| export class StrategyResolverProvider | ||
| implements Provider<JWTStrategy | undefined> { | ||
| constructor( | ||
| @inject(AuthenticationBindings.METADATA) | ||
| private metadata: AuthenticationMetadata, | ||
| ) {} | ||
| value(): ValueOrPromise<JWTStrategy | undefined> { | ||
| if (!this.metadata) { | ||
| return Promise.resolve(undefined); | ||
| } | ||
|
|
||
| const name = this.metadata.strategy; | ||
| // This should be extensible | ||
| if (name === 'jwt') { | ||
| return new JWTStrategy(); | ||
| } else { | ||
| return Promise.reject(`The strategy ${name} is not available.`); | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.