@kalisio/kdk 2.6.4 → 2.7.0

package/coverage/lcov-report/core/api/authentication.js.html

@@ -23,30 +23,30 @@
         <div class='clearfix'>
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">45.2% </span>
+                <span class="strong">72.26% </span>
                 <span class="quiet">Statements</span>
-                <span class='fraction'>99/219</span>
+                <span class='fraction'>198/274</span>
             </div>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">30% </span>
+                <span class="strong">66.66% </span>
                 <span class="quiet">Branches</span>
-                <span class='fraction'>3/10</span>
+                <span class='fraction'>22/33</span>
             </div>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">20% </span>
+                <span class="strong">66.66% </span>
                 <span class="quiet">Functions</span>
-                <span class='fraction'>2/10</span>
+                <span class='fraction'>8/12</span>
             </div>
         
             
             <div class='fl pad1y space-right2'>
-                <span class="strong">45.2% </span>
+                <span class="strong">72.26% </span>
                 <span class="quiet">Lines</span>
-                <span class='fraction'>99/219</span>
+                <span class='fraction'>198/274</span>
             </div>
         
             
@@ -61,7 +61,7 @@
             </div>
         </template>
     </div>
-    <div class='status-line low'></div>
+    <div class='status-line medium'></div>
     <pre><table class="coverage">
 <tr><td class="line-count quiet"><a name='L1'></a><a href='#L1'>1</a>
 <a name='L2'></a><a href='#L2'>2</a>
@@ -282,7 +282,62 @@
 <a name='L217'></a><a href='#L217'>217</a>
 <a name='L218'></a><a href='#L218'>218</a>
 <a name='L219'></a><a href='#L219'>219</a>
-<a name='L220'></a><a href='#L220'>220</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
+<a name='L220'></a><a href='#L220'>220</a>
+<a name='L221'></a><a href='#L221'>221</a>
+<a name='L222'></a><a href='#L222'>222</a>
+<a name='L223'></a><a href='#L223'>223</a>
+<a name='L224'></a><a href='#L224'>224</a>
+<a name='L225'></a><a href='#L225'>225</a>
+<a name='L226'></a><a href='#L226'>226</a>
+<a name='L227'></a><a href='#L227'>227</a>
+<a name='L228'></a><a href='#L228'>228</a>
+<a name='L229'></a><a href='#L229'>229</a>
+<a name='L230'></a><a href='#L230'>230</a>
+<a name='L231'></a><a href='#L231'>231</a>
+<a name='L232'></a><a href='#L232'>232</a>
+<a name='L233'></a><a href='#L233'>233</a>
+<a name='L234'></a><a href='#L234'>234</a>
+<a name='L235'></a><a href='#L235'>235</a>
+<a name='L236'></a><a href='#L236'>236</a>
+<a name='L237'></a><a href='#L237'>237</a>
+<a name='L238'></a><a href='#L238'>238</a>
+<a name='L239'></a><a href='#L239'>239</a>
+<a name='L240'></a><a href='#L240'>240</a>
+<a name='L241'></a><a href='#L241'>241</a>
+<a name='L242'></a><a href='#L242'>242</a>
+<a name='L243'></a><a href='#L243'>243</a>
+<a name='L244'></a><a href='#L244'>244</a>
+<a name='L245'></a><a href='#L245'>245</a>
+<a name='L246'></a><a href='#L246'>246</a>
+<a name='L247'></a><a href='#L247'>247</a>
+<a name='L248'></a><a href='#L248'>248</a>
+<a name='L249'></a><a href='#L249'>249</a>
+<a name='L250'></a><a href='#L250'>250</a>
+<a name='L251'></a><a href='#L251'>251</a>
+<a name='L252'></a><a href='#L252'>252</a>
+<a name='L253'></a><a href='#L253'>253</a>
+<a name='L254'></a><a href='#L254'>254</a>
+<a name='L255'></a><a href='#L255'>255</a>
+<a name='L256'></a><a href='#L256'>256</a>
+<a name='L257'></a><a href='#L257'>257</a>
+<a name='L258'></a><a href='#L258'>258</a>
+<a name='L259'></a><a href='#L259'>259</a>
+<a name='L260'></a><a href='#L260'>260</a>
+<a name='L261'></a><a href='#L261'>261</a>
+<a name='L262'></a><a href='#L262'>262</a>
+<a name='L263'></a><a href='#L263'>263</a>
+<a name='L264'></a><a href='#L264'>264</a>
+<a name='L265'></a><a href='#L265'>265</a>
+<a name='L266'></a><a href='#L266'>266</a>
+<a name='L267'></a><a href='#L267'>267</a>
+<a name='L268'></a><a href='#L268'>268</a>
+<a name='L269'></a><a href='#L269'>269</a>
+<a name='L270'></a><a href='#L270'>270</a>
+<a name='L271'></a><a href='#L271'>271</a>
+<a name='L272'></a><a href='#L272'>272</a>
+<a name='L273'></a><a href='#L273'>273</a>
+<a name='L274'></a><a href='#L274'>274</a>
+<a name='L275'></a><a href='#L275'>275</a></td><td class="line-coverage quiet"><span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
@@ -303,35 +358,28 @@
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">13x</span>
 <span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">8x</span>
+<span class="cline-any cline-yes">8x</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">5x</span>
+<span class="cline-any cline-yes">5x</span>
+<span class="cline-any cline-yes">13x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">13x</span>
+<span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-no">&nbsp;</span>
@@ -346,22 +394,11 @@
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
@@ -377,6 +414,8 @@
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
@@ -398,19 +437,90 @@
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">18x</span>
+<span class="cline-any cline-yes">18x</span>
+<span class="cline-any cline-yes">18x</span>
+<span class="cline-any cline-yes">18x</span>
+<span class="cline-any cline-yes">18x</span>
+<span class="cline-any cline-yes">27x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">9x</span>
+<span class="cline-any cline-yes">9x</span>
+<span class="cline-any cline-yes">44x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">51x</span>
+<span class="cline-any cline-yes">51x</span>
+<span class="cline-any cline-yes">6x</span>
+<span class="cline-any cline-yes">6x</span>
+<span class="cline-any cline-yes">6x</span>
+<span class="cline-any cline-yes">6x</span>
+<span class="cline-any cline-yes">6x</span>
+<span class="cline-any cline-yes">6x</span>
+<span class="cline-any cline-yes">51x</span>
+<span class="cline-any cline-yes">45x</span>
+<span class="cline-any cline-yes">45x</span>
+<span class="cline-any cline-yes">45x</span>
+<span class="cline-any cline-yes">51x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
@@ -432,109 +542,136 @@
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-no">&nbsp;</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
+<span class="cline-any cline-yes">2x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
 <span class="cline-any cline-no">&nbsp;</span>
 <span class="cline-any cline-no">&nbsp;</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
 <span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">1x</span>
-<span class="cline-any cline-yes">9x</span>
-<span class="cline-any cline-yes">9x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">4x</span>
+<span class="cline-any cline-yes">17x</span>
+<span class="cline-any cline-yes">11x</span>
+<span class="cline-any cline-yes">11x</span>
 <span class="cline-any cline-neutral">&nbsp;</span></td><td class="text"><pre class="prettyprint lang-js">import makeDebug from 'debug'
 import _ from 'lodash'
+import qs from 'qs'
 import 'winston-daily-rotate-file'
 // import { RateLimiter } from 'limiter'
 import HttpLimiter from 'express-rate-limit'
-import mongodb from 'mongodb'
 import errors from '@feathersjs/errors'
 import { AuthenticationService, JWTStrategy } from '@feathersjs/authentication'
 import { LocalStrategy } from '@feathersjs/authentication-local'
 import OAuth from '@feathersjs/authentication-oauth'
 import PasswordValidator from 'password-validator'
+import { isValidObjectID } from './db.js'
 &nbsp;
 const debug = makeDebug('kdk:core:authentication')
-const { ObjectID } = mongodb
 const { oauth, OAuthStrategy } = OAuth
 const { NotAuthenticated } = errors
 &nbsp;
 export class Authentication extends AuthenticationService {
   // Feathers does not seem to take input payload into account when renewing the token,
   // see https://github.com/feathersjs/feathers/issues/3419
-<span class="fstat-no" title="function not covered" >  async getPayload (authResult, params) {</span>
-<span class="cstat-no" title="statement not covered" >    // Params can override defaults</span>
-<span class="cstat-no" title="statement not covered" >    if (params.payload) {</span>
+  async getPayload (authResult, params) {
+    // Params can override defaults
+    if (params.payload) <span class="branch-0 cbranch-no" title="branch not covered" >{</span>
 <span class="cstat-no" title="statement not covered" >      return params.payload</span>
-<span class="cstat-no" title="statement not covered" >    } else if (authResult.authentication &amp;&amp; authResult.authentication.payload) {</span>
-<span class="cstat-no" title="statement not covered" >      // Avoid conflicting with default token options added when generating a new token</span>
-<span class="cstat-no" title="statement not covered" >      return _.omit(authResult.authentication.payload, ['aud', 'iss', 'exp', 'sub', 'iat', 'jti', 'nbf'])</span>
-<span class="cstat-no" title="statement not covered" >    } else {</span>
-<span class="cstat-no" title="statement not covered" >      return {}</span>
-<span class="cstat-no" title="statement not covered" >    }</span>
-<span class="cstat-no" title="statement not covered" >  }</span>
+    } else if (authResult.authentication &amp;&amp; authResult.authentication.payload) {
+      // Avoid conflicting with default token options added when generating a new token
+      return _.omit(authResult.authentication.payload, ['aud', 'iss', 'exp', 'sub', 'iat', 'jti', 'nbf'])
+    } else {
+      return {}
+    }
+  }
+&nbsp;
+  // Similarly the subject will not be set by Feathers for stateless tokens that do not target existing users.
+  async getTokenOptions (authResult, params) {
+    const jwtOptions = await super.getTokenOptions(authResult, params)
+    if (!jwtOptions.subject) {
+      const subject = _.get(authResult, 'authentication.payload.sub')
+      if (subject) jwtOptions.subject = subject
+    }
+    return jwtOptions
+  }
 }
 &nbsp;
 export class AuthenticationProviderStrategy extends OAuthStrategy {
+<span class="fstat-no" title="function not covered" >  setAuthentication (auth) {</span>
+<span class="cstat-no" title="statement not covered" >    super.setAuthentication(auth)</span>
+<span class="cstat-no" title="statement not covered" >    const authConfig = this.authentication.configuration</span>
+<span class="cstat-no" title="statement not covered" >    const { oauth } = authConfig</span>
+<span class="cstat-no" title="statement not covered" >    // Single logout supported ?</span>
+<span class="cstat-no" title="statement not covered" >    const { logout_url: logoutUrl, post_logout_url: postLogoutUrl, key } = this.configuration</span>
+<span class="cstat-no" title="statement not covered" >    if (logoutUrl &amp;&amp; key) {</span>
+<span class="cstat-no" title="statement not covered" >      // Cannot use oauth/:provider/logout route as oauth/:provider is already intercepted by feathers and this causes an error</span>
+<span class="cstat-no" title="statement not covered" >      this.app.get(`/oauth-logout/${this.name}`, (req, res) =&gt; {</span>
+<span class="cstat-no" title="statement not covered" >        return res.redirect(logoutUrl + '?' + qs.stringify({</span>
+<span class="cstat-no" title="statement not covered" >          post_logout_redirect_uri: postLogoutUrl || oauth.redirect,</span>
+<span class="cstat-no" title="statement not covered" >          client_id: key</span>
+<span class="cstat-no" title="statement not covered" >        }))</span>
+<span class="cstat-no" title="statement not covered" >      })</span>
+<span class="cstat-no" title="statement not covered" >    }</span>
+<span class="cstat-no" title="statement not covered" >  }</span>
+&nbsp;
 <span class="fstat-no" title="function not covered" >  async getEntityData (profile, entity) {</span>
 <span class="cstat-no" title="statement not covered" >    const createEntity = _.isNil(entity)</span>
 <span class="cstat-no" title="statement not covered" >    // Add provider Id</span>
@@ -553,6 +690,13 @@ export class AuthenticationProviderStrategy extends OAuthStrategy {
 <span class="cstat-no" title="statement not covered" >  }</span>
 &nbsp;
 <span class="fstat-no" title="function not covered" >  async getEntityQuery (profile) {</span>
+<span class="cstat-no" title="statement not covered" >    // Ensure the profile is right before requesting based on it</span>
+<span class="cstat-no" title="statement not covered" >    // as when an error is raised the profile will not contain any ID or email</span>
+<span class="cstat-no" title="statement not covered" >    // and we might build a request retrieving any user</span>
+<span class="cstat-no" title="statement not covered" >    if (!_.has(profile, 'id') &amp;&amp; !_.has(profile, 'sub') &amp;&amp; !_.has(profile, this.emailFieldInProfile || 'email')) {</span>
+<span class="cstat-no" title="statement not covered" >      // This ensure no user will be retrieved</span>
+<span class="cstat-no" title="statement not covered" >      return { $limit: 0 }</span>
+<span class="cstat-no" title="statement not covered" >    }</span>
 <span class="cstat-no" title="statement not covered" >    const query = {</span>
 <span class="cstat-no" title="statement not covered" >      $or: [</span>
 <span class="cstat-no" title="statement not covered" >        { [`${this.name}Id`]: profile.id || profile.sub },</span>
@@ -577,59 +721,80 @@ export class AuthenticationProviderStrategy extends OAuthStrategy {
 // - a socket or a rest transport
 // It also supports token given as query parameter
 export class JWTAuthenticationStrategy extends JWTStrategy {
-<span class="fstat-no" title="function not covered" >  async authenticate (authentication, params) {</span>
-<span class="cstat-no" title="statement not covered" >    const { accessToken } = authentication</span>
-<span class="cstat-no" title="statement not covered" >    const { entity } = this.configuration</span>
-<span class="cstat-no" title="statement not covered" >    const renewJwt = _.get(this.configuration, 'renewJwt', true)</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >    if (!accessToken) {</span>
+  async authenticate (authentication, params) {
+    const { accessToken } = authentication
+    const authConfig = this.authentication.configuration
+    const { identityFields } = authConfig
+    const { entity } = this.configuration
+    const renewJwt = _.get(this.configuration, 'renewJwt', true)
+    const { provider, ...paramsWithoutProvider } = params
+&nbsp;
+    if (!accessToken) <span class="branch-0 cbranch-no" title="branch not covered" >{</span>
 <span class="cstat-no" title="statement not covered" >      throw new NotAuthenticated('No access token')</span>
 <span class="cstat-no" title="statement not covered" >    }</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >    const payload = await this.authentication.verifyAccessToken(accessToken, params.jwt)</span>
-<span class="cstat-no" title="statement not covered" >    const result = {</span>
-<span class="cstat-no" title="statement not covered" >      // First key trick - by deleting the token here</span>
-<span class="cstat-no" title="statement not covered" >      // we will get Feathers generate a new one</span>
-<span class="cstat-no" title="statement not covered" >      // accessToken,</span>
-<span class="cstat-no" title="statement not covered" >      authentication: {</span>
-<span class="cstat-no" title="statement not covered" >        strategy: 'jwt',</span>
-<span class="cstat-no" title="statement not covered" >        accessToken,</span>
-<span class="cstat-no" title="statement not covered" >        payload</span>
-<span class="cstat-no" title="statement not covered" >      }</span>
-<span class="cstat-no" title="statement not covered" >    }</span>
-<span class="cstat-no" title="statement not covered" >    if (!renewJwt) result.accessToken = accessToken</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >    // Second key trick</span>
-<span class="cstat-no" title="statement not covered" >    // Return user attached to the token if any</span>
-<span class="cstat-no" title="statement not covered" >    // Return basic information for a stateless token otherwise</span>
-<span class="cstat-no" title="statement not covered" >    // As we only target MongoDB now, check for a valid ID otherwise assume a stateless token as well</span>
-<span class="cstat-no" title="statement not covered" >    if (payload.sub &amp;&amp; ObjectID.isValid(payload.sub)) {</span>
-<span class="cstat-no" title="statement not covered" >      const entityId = await this.getEntityId(result, params)</span>
-<span class="cstat-no" title="statement not covered" >      const value = await this.getEntity(entityId, params)</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >      return {</span>
-<span class="cstat-no" title="statement not covered" >        ...result,</span>
-<span class="cstat-no" title="statement not covered" >        [entity]: value</span>
-<span class="cstat-no" title="statement not covered" >      }</span>
-<span class="cstat-no" title="statement not covered" >    }</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >    return result</span>
-<span class="cstat-no" title="statement not covered" >  }</span>
 &nbsp;
-<span class="fstat-no" title="function not covered" >  async parse (req) {</span>
-<span class="cstat-no" title="statement not covered" >    const { jwt } = req.query</span>
-<span class="cstat-no" title="statement not covered" >    if (jwt) {</span>
-<span class="cstat-no" title="statement not covered" >      debug('Found parsed query value')</span>
-<span class="cstat-no" title="statement not covered" >      delete req.query.jwt</span>
-<span class="cstat-no" title="statement not covered" >      return {</span>
-<span class="cstat-no" title="statement not covered" >        strategy: 'jwt',</span>
-<span class="cstat-no" title="statement not covered" >        accessToken: jwt</span>
-<span class="cstat-no" title="statement not covered" >      }</span>
-<span class="cstat-no" title="statement not covered" >    } else {</span>
-<span class="cstat-no" title="statement not covered" >      const result = await super.parse(req)</span>
-<span class="cstat-no" title="statement not covered" >      return result</span>
-<span class="cstat-no" title="statement not covered" >    }</span>
-<span class="cstat-no" title="statement not covered" >  }</span>
+    const payload = await this.authentication.verifyAccessToken(accessToken, params.jwt)
+    const result = {
+      // First key trick - by deleting the token here
+      // we will get Feathers generate a new one
+      // accessToken,
+      authentication: {
+        strategy: 'jwt',
+        accessToken,
+        payload
+      }
+    }
+    if (!renewJwt) <span class="branch-0 cbranch-no" title="branch not covered" >result.accessToken = accessToken</span>
+&nbsp;
+    // Second key trick
+    // Return user attached to the token if any
+    // Return basic information for a stateless token otherwise
+    if (payload.sub) {
+      // Check for a valid MongoDB ID
+      if (isValidObjectID(payload.sub)) {
+        const entityId = await this.getEntityId(result, params)
+        const value = await this.getEntity(entityId, params)
+&nbsp;
+        return {
+          ...result,
+          [entity]: value
+        }
+      } else if (identityFields) {
+        // Otherwise use others fields to identify the user if defined
+        const query = {
+          $or: _.reduce(identityFields, (or, field) =&gt; or.concat([{ [field]: payload.sub }]), []),
+          $limit: 1
+        }
+        // Avoid sending provider to internal call as it might raises some issues with hooks relying on it otherwise
+        const response = await this.entityService.find({ ...paramsWithoutProvider, query })
+        const [value = null] = response.data ? response.data <span class="branch-0 cbranch-no" title="branch not covered" >: response</span>
+        // Otherwise assume a stateless token
+        if (value) {
+          return {
+            ...result,
+            [entity]: value
+          }
+        }
+      }
+    }
+&nbsp;
+    return result
+  }
+&nbsp;
+  async parse (req) {
+    const { jwt } = req.query
+    if (jwt) {
+      debug('Found parsed query value')
+      delete req.query.jwt
+      return {
+        strategy: 'jwt',
+        accessToken: jwt
+      }
+    } else {
+      const result = await super.parse(req)
+      return result
+    }
+  }
 }
 &nbsp;
 export <span class="fstat-no" title="function not covered" >async function createDefaultUsers () {</span>
@@ -650,17 +815,17 @@ export <span class="fstat-no" title="function not covered" >async function creat
 <span class="cstat-no" title="statement not covered" >}</span>
 &nbsp;
 // Middleware to be used to support jwt as a query param
-export <span class="fstat-no" title="function not covered" >function extractJwtFromQuery (req, res, next) {</span>
-<span class="cstat-no" title="statement not covered" >  const { jwt } = req.query</span>
-<span class="cstat-no" title="statement not covered" >  if (jwt) {</span>
+export function extractJwtFromQuery (req, res, next) {
+  const { jwt } = req.query
+  if (jwt) <span class="branch-0 cbranch-no" title="branch not covered" >{</span>
 <span class="cstat-no" title="statement not covered" >    _.set(req, 'feathers.authentication', {</span>
 <span class="cstat-no" title="statement not covered" >      strategy: 'jwt',</span>
 <span class="cstat-no" title="statement not covered" >      accessToken: jwt</span>
 <span class="cstat-no" title="statement not covered" >    })</span>
 <span class="cstat-no" title="statement not covered" >  }</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >  next()</span>
-<span class="cstat-no" title="statement not covered" >}</span>
+&nbsp;
+  next()
+}
 &nbsp;
 export default function auth (app) {
   const config = app.get('authentication')
@@ -695,7 +860,7 @@ export default function auth (app) {
     let validator
     app.getPasswordPolicy = function () {
       // Create on first access, should not be done outside a function because the app has not yet been correctly initialized
-      if (validator) <span class="branch-0 cbranch-no" title="branch not covered" >return validator</span>
+      if (validator) return validator
       const { minLength, maxLength, uppercase, lowercase, digits, symbols, noSpaces, prohibited } = config.passwordPolicy
 &nbsp;
       validator = new PasswordValidator()
@@ -708,11 +873,11 @@ export default function auth (app) {
       if (noSpaces) <span class="branch-0 cbranch-no" title="branch not covered" >validator.not().spaces()</span>
       if (prohibited) validator.is().not().oneOf(prohibited)
 &nbsp;
-      validator.comparePassword = <span class="fstat-no" title="function not covered" >function (entity, password) {</span>
-<span class="cstat-no" title="statement not covered" >        const [localStrategy] = app.service(config.path).getStrategies('local')</span>
-<span class="cstat-no" title="statement not covered" ></span>
-<span class="cstat-no" title="statement not covered" >        return localStrategy.comparePassword(entity, password)</span>
-<span class="cstat-no" title="statement not covered" >      }</span>
+      validator.comparePassword = function (entity, password) {
+        const [localStrategy] = app.service(config.path).getStrategies('local')
+&nbsp;
+        return localStrategy.comparePassword(entity, password)
+      }
 &nbsp;
       validator.options = config.passwordPolicy
 &nbsp;
@@ -727,7 +892,7 @@ export default function auth (app) {
             <div class='footer quiet pad2 space-top1 center small'>
                 Code coverage generated by
                 <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
-                at 2024-08-13T10:02:04.872Z
+                at 2026-03-10T09:15:24.774Z
             </div>
         <script src="../../prettify.js"></script>
         <script>