hapi-auth-jwt2/test/error_func_server.cjs

Hapi.js Authentication Plugin/Scheme using JSON Web Tokens (JWT)

const Hapi   = require('@hapi/hapi');
const secret = 'NeverShareYourSecret';

// for debug options see: https://hapi.dev/tutorials/logging/
let debug;
// debug = { debug: { 'request': ['error', 'uncaught'] } };
debug = { debug: false };
const server = new Hapi.server(debug);

const sendToken = function(req, reply) {
  return req.auth.token || null;
};

const privado = function(req, reply) {
  return req.auth.credentials;
};

let lastErrorContext = undefined;
function getLastErrorContext() {
  return lastErrorContext;
}

// defining our own validate function lets us do something
// useful/custom with the decodedToken before reply(ing)
const customVerify = function (decoded, request) {
  lastErrorContext = undefined;
  if (decoded.error) {
    throw new Error('customVerify fails!');
  }
  else if (decoded.custom_error) {
    throw new Error(decoded.custom_error);
  }
  else if (decoded.some_property) {
    return { isValid: true, credentials: decoded};
  }
  else {
    return { isValid: false };
  }
};

const customErrorFunc = function (errorContext, req, h) {
  const result = errorContext;
  lastErrorContext = errorContext;

  h.response().state('customError', 'setInCustomErrorFn');

  if (errorContext.message.toString().search(/ignore/) >= 0) {
    result = null;
  } else if (errorContext.errorType === 'unauthorized') {
    result.message = "Invalid credentials mate";
  }
  return result;
};
const init = async() => {
  await server.register(require('../lib/index.cjs'));

  server.auth.strategy('jwt', 'jwt', {
    verify: customVerify, // no validate or key required.
    errorFunc: customErrorFunc
  });

  server.route([
    { method: 'GET',  path: '/', handler: sendToken, config: { auth: false } },
    { method: 'GET', path: '/required', handler: privado, config: { auth: { mode: 'required', strategy: 'jwt' } } },
    { method: 'GET', path: '/optional', handler: privado, config: { auth: { mode: 'optional', strategy: 'jwt' } } },
    { method: 'GET', path: '/try', handler: privado, config: { auth: { mode: 'try', strategy: 'jwt' } } }
  ]);

};

init();

module.exports = { server, getLastErrorContext };