hapi-auth-jwt2/test/dynamic_key_server.cjs

Hapi.js Authentication Plugin/Scheme using JSON Web Tokens (JWT)

const Hapi = require('@hapi/hapi');
const Boom = require('@hapi/boom');

// for debug options see: https://hapi.dev/tutorials/logging/
const server = new Hapi.server({ debug: false });

const multiTenantSecretKeys = {
  dunderMifflin: 'michaelscott',
  wernhamHogg: 'davidbrent'
};

const db = {
  "123": { allowed: true,  "name": "Charlie"   },
  "321": { allowed: false, "name": "Old Gregg" }
};

const keyFunc = async function (decoded) {
  if (decoded.tenant) {
    const key = multiTenantSecretKeys[decoded.tenant];

    if (key) {
      return {key, additional: 'something extra here if needed' };
    }
    else {
      throw Boom.unauthorized('Key not found');
    }
  }
  else {
    throw Boom.badRequest('Tenant was not specified in token payload');
  }
};

// defining our own validate function lets us do something
// useful/custom with the decodedToken before reply(ing)
const validate = function (decoded, request) {
  if (db[decoded.id].allowed) {
    const credentials = decoded;

    if (request.plugins['hapi-auth-jwt2']) {
      credentials.extraInfo = request.plugins['hapi-auth-jwt2'].extraInfo;
    }

    return {isValid: true, credentials};
  }
  else {
    return {isValid:false};
  }
};

const home = function(req, reply) {
  return 'Hai!';
};

const privado = function(req, reply) {
  const data = (req.auth.credentials.extraInfo) ? req.auth.credentials.extraInfo : null;

  return {
    message: 'success',
    data: data
  };
};
const init = async() => {
  await server.register(require('../lib/index.cjs'));

  server.auth.strategy('jwt', 'jwt', { key: keyFunc, validate });

  server.route([
    { method: 'GET',  path: '/', handler: home, config: { auth: false } },
    { method: 'POST', path: '/privado', handler: privado, config: { auth: 'jwt' } }
  ]);

};

init();

module.exports = server;