passport-smartrecruiters/examples/login/app.js

SmartRecruiters OAuth2 authentication strategy for Passport.

var express = require('express')
    , passport = require('passport')
    , util = require('util')
    , SmartrecruitersStrategy = require('passport-smartrecruiters').Strategy;
var cookieParser = require('cookie-parser');
var bodyParser = require('body-parser');
var morgan = require('morgan');
var session = require('express-session');
var expressLayouts = require('express-ejs-layouts')

var SMARTRECRUITERS_CLIENT_ID = "--insert-smartrecruiters-client-id-here--";
var SMARTRECRUITERS_CLIENT_SECRET = "--insert-smartrecruiters-client-secret-here--";



// Passport session setup.
//   To support persistent login sessions, Passport needs to be able to
//   serialize users into and deserialize users out of the session.  Typically,
//   this will be as simple as storing the user ID when serializing, and finding
//   the user by ID when deserializing.  However, since this example does not
//   have a database of user records, the complete Smartrecruiters profile is serialized
//   and deserialized.
passport.serializeUser(function (user, done) {
    done(null, user);
});

passport.deserializeUser(function (obj, done) {
    done(null, obj);
});


// Use the SmartrecruitersStrategy within Passport.
//   Strategies in Passport require a `verify` function, which accept
//   credentials (in this case, an accessToken, refreshToken, and Smartrecruiters
//   profile), and invoke a callback with a user object.
passport.use(new SmartrecruitersStrategy({
        clientID: SMARTRECRUITERS_CLIENT_ID,
        clientSecret: SMARTRECRUITERS_CLIENT_SECRET,
        callbackURL: "http://localhost:3000/auth/smartrecruiters/callback"
    },
    function (accessToken, refreshToken, profile, done) {
        // asynchronous verification, for effect...
        process.nextTick(function () {

            // To keep the example simple, the user's GitHub profile is returned to
            // represent the logged-in user.  In a typical application, you would want
            // to associate the Smartrecruiters account with a user record in your database,
            // and return that user instead.
            return done(null, profile);
        });
    }
));


var app = express();

// configure Express
app.set('views', __dirname + '/views');
app.set('view engine', 'ejs');
app.use(expressLayouts);
app.use(morgan('combined'));
app.use(cookieParser());
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({extended: true}));
app.use(session({ secret: 'keyboard cat', resave: false, saveUninitialized: false}));
// Initialize Passport!  Also use passport.session() middleware, to support
// persistent login sessions (recommended).
app.use(passport.initialize());
app.use(passport.session());
app.use(express.static(__dirname + '/public'));


app.get('/', function (req, res) {
    res.render('index', { user: req.user });
});

app.get('/account', ensureAuthenticated, function (req, res) {
    res.render('account', { user: req.user });
});

app.get('/login', function (req, res) {
    res.render('login', { user: req.user });
});

// GET /auth/smartrecruiters
//   Use passport.authenticate() as route middleware to authenticate the
//   request.  The first step in Smartrecruiters authentication will involve redirecting
//   the user to smartrecruiters.com.  After authorization, Smartrecruiters will redirect the user
//   back to this application at /auth/smartrecruiters/callback
app.get('/auth/smartrecruiters',
    passport.authenticate('smartrecruiters', {scope: ['jobs_read','candidates_read']}),
    function (req, res) {
        // The request will be redirected to Smartrecruiters for authentication, so this
        // function will not be called.
    });

// GET /auth/smartrecruiters/callback
//   Use passport.authenticate() as route middleware to authenticate the
//   request.  If authentication fails, the user will be redirected back to the
//   login page.  Otherwise, the primary route function function will be called,
//   which, in this example, will redirect the user to the home page.
app.get('/auth/smartrecruiters/callback',
    passport.authenticate('smartrecruiters', { failureRedirect: '/login' }),
    function (req, res) {
        res.redirect('/');
    });

app.get('/logout', function (req, res) {
    req.logout();
    res.redirect('/');
});

app.listen(3000);


// Simple route middleware to ensure user is authenticated.
//   Use this route middleware on any resource that needs to be protected.  If
//   the request is authenticated (typically via a persistent login session),
//   the request will proceed.  Otherwise, the user will be redirected to the
//   login page.
function ensureAuthenticated(req, res, next) {
    if (req.isAuthenticated()) {
        return next();
    }
    res.redirect('/login')
}