rapala61 / express_auth_student_template

Auth template given to students for project implementations

Steps to use the template:

The best way to use it is to fork it and then use it in your own projects. Once you have it cloned in your localhost from your fork, make sure you implement the next steps:

1. Run npm install
2. create a new file at the root of your project named .env. The contents should be: JWT_SECRET=THE_SUPER_SECRET_FOR_YOUR_JWT_TOKENS. This is the token used to encrypt your authorization tokens when a user successfully logs in.
3. Change the mongo database to the one you are using in index.js line: 14.

mongoose.connect( process.env.MONGOLAB_URI || "mongodb://localhost/your_database_name_goes_here" );

Licensing

All content is licensed under a CC­BY­NC­SA 4.0 license. All software code is licensed under GNU GPLv3. For commercial use or alternative licensing, please contact [email protected].

express_auth_student_template's Issues

Passport-JWT Needs to target users based on payload

This is a line in the passport jwt strategy that gets the user from the payload:

    User.findOne({id: jwt_payload.sub}, function(err, user) {

It turns out that the id: THING.sub parameter doesnt sit well with mongoose. So we were getting the wrong user after logging in. I'd suggest targeting the query via a unique variable inside the payload:

User.findOne({username: jwt_payload._doc.username}, function(err, user) {

Heroku change Mongo Labs URI.

Change from:

// connect to db
// process.env.MONGOLAB_URI is needed for when we deploy to Heroku
mongoose.connect( process.env.MONGOLAB_URI || "mongodb://localhost/auth_template_app" );

To:

// connect to db
// process.env.MONGODB_URI is needed for when we deploy to Heroku
mongoose.connect( process.env.MONGODB_URI || "mongodb://localhost/auth_template_app" );

time limit syntax change

Line 16 in auth.js should be "expiresIn: 1440"