rapala61 / express_auth_student_template Goto Github PK

This is a line in the passport jwt strategy that gets the user from the payload:

    User.findOne({id: jwt_payload.sub}, function(err, user) {

It turns out that the id: THING.sub parameter doesnt sit well with mongoose. So we were getting the wrong user after logging in. I'd suggest targeting the query via a unique variable inside the payload:

User.findOne({username: jwt_payload._doc.username}, function(err, user) {

Line 16 in auth.js should be "expiresIn: 1440"

Change from:

// connect to db
// process.env.MONGOLAB_URI is needed for when we deploy to Heroku
mongoose.connect( process.env.MONGOLAB_URI || "mongodb://localhost/auth_template_app" );

To:

// connect to db
// process.env.MONGODB_URI is needed for when we deploy to Heroku
mongoose.connect( process.env.MONGODB_URI || "mongodb://localhost/auth_template_app" );