sails-api-jwt/api/policies/jwtAuth.js

An example implementation of JWT-based API for user registration and authorization.

/**
 * JWT Auth Policy
 *
 * @module      :: Policy
 * @description :: Simple policy to allow any authenticated user via JWT token
 * @docs        :: http://sailsjs.org/#!/documentation/concepts/Policies
 *
 */

const API_ERRORS = require('../constants/APIErrors');
const TOKEN_RE = /^Bearer$/i;

module.exports = function (req, res, next) {
	let token = null;

	if (req.headers && req.headers.authorization) {
		const parts = req.headers.authorization.split(' ');
		if (parts.length === 2) {
			const scheme = parts[0];
			const credentials = parts[1];

			if (TOKEN_RE.test(scheme)) {
				token = credentials;
			}
		}
	} else {
		return res.badRequest(Utils.jsonErr('No Authorization header was found'));
	}

	if (!token) {
		return res.badRequest(Utils.jsonErr('Format is "Authorization: Bearer [token]"'));
	}

	UserManager
		.authenticateUserByToken(token)
		.then(user => {
			req.userInfo = user.toJSON();
			next();
		})
		.catch(err => {
			switch (err) {
				case API_ERRORS.INACTIVE_TOKEN:
				case API_ERRORS.USER_NOT_FOUND:
				case API_ERRORS.USER_LOCKED:
				default:
					return res.badRequest(Utils.jsonErr('Invalid token'));
			}
		});
};