@igea/oac_backend 1.0.8 → 1.0.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@igea/oac_backend",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "description": "Backend service for the OAC project",
   "main": "src/index.js",
   "scripts": {
@@ -18,7 +18,9 @@
   },
   "homepage": "https://github.com/chpigea/oac_backend#readme",
   "dependencies": {
+    "@igea/oac_jwt_helpers": "1.0.6",
     "axios": "1.10.0",
+    "cookie-parser": "1.4.7",
     "express": "5.1.0",
     "get-port": "7.1.0",
     "knex": "3.1.0",

package/src/config/development.json

@@ -11,5 +11,6 @@
 		"password": "postgres",
 		"database": "oac",
 		"schema": "public"
-	}
+	},
+	"jwt_secret": "@igea#"
 }

package/src/config/production.json

@@ -11,5 +11,6 @@
 		"password": "postgres",
 		"database": "oac",
 		"schema": "public"
-	}
+	},
+	"jwt_secret": "@igea#"
 }

package/src/controllers/auth.js

@@ -2,41 +2,72 @@ const express = require('express');
 const router = express.Router();
 const Users = require('../models/users');
 
-/**
-curl -X POST \
--H "Content-Type: application/json" \
--d '{"type": "login","user":"igea","password":"@igea#"}' \
-http://localhost:4000/backend/auth/authenticate
- */
-router.post('/authenticate', (req, res) => {  
-  console.log("here authenticate")
-  let body = req.body 
-  //let type = body.type
-  let user = body.user
-  let password = body.password
-  Users.fromAuthentication(user, password)
-  .then(response =>{
-    res.json({ 
-        success: true, 
-        data: response, 
-        message: null
-    });
-  }).catch(err => { 
-    res.json({ 
-        success: false, 
-        data: null, 
-        message: `${ err }`
-    });
-  })
-});
+module.exports = function(jwtLib){
+  /**
+  curl -X POST \
+  -H "Content-Type: application/json" \
+  -d '{"type": "login","user":"igea","password":"@igea#"}' \
+  http://localhost:4000/backend/auth/authenticate
+  */
 
-router.get('/echo', (req, res) => {  
-    console.log("here ECHO")
-    res.json({ 
-        success: true, 
-        data: "echo", 
-        message: null
-    });
-});
+  const manageUser = function(res, user){
+    let token = jwtLib.createToken(user)
+      res.cookie('token', token, {
+        httpOnly: true,
+        secure: false,
+        sameSite: 'lax'
+      })
+      res.json({ 
+          success: true, 
+          data: user, 
+          message: null
+      });
+  }
+
+  router.post('/authenticate', (req, res) => {  
+    console.log("here authenticate")
+    let body = req.body 
+    let type = body.type
+    
+    if(type.toLowerCase()=="login"){
+      let user = body.user
+      let password = body.password
+      Users.fromAuthentication(user, password)
+      .then(response => {
+        response["is_anonymous"] = false
+        manageUser(res, response)
+      }).catch(err => { 
+        res.json({ 
+            success: false, 
+            data: null, 
+            message: `${ err }`
+        });
+      })
+    }else{
+      manageUser(res, {
+        id: -1,
+        name: 'anonymous',
+        surname: 'anonymous',
+        username: 'anonymous',
+        email: 'anonymous@igea-soluzioni.it',
+        mobile: null,
+        is_admin: false,
+        is_active: true,
+        is_anonymous: true
+      })
+    }
+  });
+
+  router.get('/echo', (req, res) => {  
+      console.log("here ECHO")
+      res.json({ 
+          success: true, 
+          data: "echo", 
+          message: null
+      });
+  });
+
+  return router
+
+}
 
-module.exports = router

package/src/index.js

@@ -2,10 +2,23 @@ const config = require('./config.js');
 const express = require("express");
 const axios = require("axios");
 const getPort = require('get-port');
+const cookieParser = require('cookie-parser');
 const serviceName = "backend"
+const jwtLibFactory = require('@igea/oac_jwt_helpers')
+const jwtLib = jwtLibFactory({
+    secret: process.env.JWT_SECRET || config.jwt_secret,
+    excludePaths: [
+        `/${serviceName}/auth/authenticate`,
+        `/${serviceName}/auth/echo`,
+        `/${serviceName}/health`
+    ],
+    signOptions: { expiresIn: '1h' }
+});
 
 const app = express();
+app.use(cookieParser());
 app.use(express.json());
+app.use(jwtLib.middleware);
 
 let newPort = null
 
@@ -31,7 +44,7 @@ getPort.default({
     const healthRouter = require('./controllers/health.js')
     app.use(`/${serviceName}/health`, healthRouter)
 
-    const authRouter = require('./controllers/auth.js')
+    const authRouter = require('./controllers/auth.js')(jwtLib)
     app.use(`/${serviceName}/auth`, authRouter)
 
     app.listen(port, async () => {