passport-http-2

import express from 'express'; import passport from 'passport'; import { BasicStrategy, DigestStrategy } from 'passport-http-2'; const app = express(); // In a real application, replace this with a database or secure user store const users = new Map<string, { password?: string, digestSecret?: string, id: string }>([ ['alice', { password: 'password', id: 'alice' }], ['bob', { digestSecret: 'secret', id: 'bob' }] ]); passport.use(new BasicStrategy( async (userid, password, done) => { console.log(`Basic attempt for user: ${userid}`); const user = users.get(userid); if (!user || user.password !== password) { return done(null, false); // Authentication failed } return done(null, user); // Authentication successful } )); passport.use(new DigestStrategy( { qop: 'auth' }, // Quality of Protection (qop) for Digest authentication async (username, done) => { console.log(`Digest attempt for user: ${username}`); const user = users.get(username); if (!user) { return done(null, false); // User not found } // Digest strategy expects user, then the shared secret (password) return done(null, user, user.digestSecret); }, async (params, done) => { // Optional: Validate nonce-related parameters here to prevent replay attacks // For this example, we just say 'true' console.log('Digest nonce params:', params); done(null, true); } )); app.use(passport.initialize()); app.get('/', (req, res) => { res.send('Hello, you can try accessing /basic or /digest'); }); app.get('/basic', passport.authenticate('basic', { session: false }), (req, res) => { res.json({ message: `Hello Basic authenticated user: ${(req.user as any).id}` }); }); app.get('/digest', passport.authenticate('digest', { session: false }), (req, res) => { res.json({ message: `Hello Digest authenticated user: ${(req.user as any).id}` }); }); const PORT = process.env.PORT || 3000; app.listen(PORT, () => { console.log(`Server running on http://localhost:${PORT}`); console.log('Try: curl -u alice:password http://localhost:3000/basic'); console.log('Try: curl --digest -u bob:secret http://localhost:3000/digest'); });