jwt-redis-session-extra/lib/jwtRedisSession.js

JSON Web Token session middleware backed by Redis

var	_ = require("lodash"),
	jwt = require("jsonwebtoken"),
	utils = require("./utils");

module.exports = function(options){

	if(!options.client || !options.secret || !options.passphrase)
		throw new Error("Redis client and secret required for jwtRedisSession!");

	options = {
		client: options.client,
		passphrase: options.passphrase,
		pubkey: options.pubkey,
		secret: options.secret,
		algorithm: options.algorithm || "HS256",
		keyspace: options.keyspace || "sess:",
		maxAge: options.maxAge || 86400,
		requestKey: options.requestKey || "session",
		requestArg: options.requestArg || "accessToken"
	};

	var sessionMethods = utils(options);

	var requestHeader = _.reduce(options.requestArg.split(""), function(memo, ch){
		return memo + (ch.toUpperCase() === ch ? "-" + ch.toLowerCase() : ch);
	}, "x" + (options.requestArg.charAt(0) === options.requestArg.charAt(0).toUpperCase() ? "" : "-"));


	return function(req, res, next){

		req[options.requestKey] = {};

		_.extend(req[options.requestKey], sessionMethods);

		var token = req.query.token || req.params.token || req.body.token || req.body[options.requestArg] || req.get(requestHeader);

		if(token){
//			jwt.verify(token, options.secret, function(error, decoded){
			jwt.verify(token, options.pubkey, function(error, decoded){
				if(error || !decoded.jti)
					return next();

				options.client.get(options.keyspace + decoded.jti, function(err, session){
					if(err || !session)
						return next();

					try{
						session = JSON.parse(session);
					}catch(e){
						return next();
					}

					_.extend(req[options.requestKey], session);
					req[options.requestKey].claims = decoded;
					req[options.requestKey].id = decoded.jti;
					req[options.requestKey].jwt = token;
					req[options.requestKey].touch(); // update the TTL
					next();
				});
			});
		}else{
			next();
		}
	};

};