passport-http-bearer

import express from 'express'; import passport from 'passport'; import { Strategy as BearerStrategy } from 'passport-http-bearer'; const app = express(); const PORT = process.env.PORT || 3000; // Dummy User/Token database for example purposes const users = [ { id: '1', username: 'testuser', token: 'a1b2c3d4e5f6' }, ]; // Configure the Bearer strategy passport.use(new BearerStrategy( async (token, done) => { console.log(`Attempting to verify token: ${token}`); try { const user = users.find(u => u.token === token); if (!user) { console.log('Invalid token provided.'); return done(null, false, { message: 'Invalid token' }); } console.log(`Token verified for user: ${user.username}`); return done(null, user, { scope: 'all' }); } catch (err) { console.error('Error during token verification:', err); return done(err); } } )); // Initialize Passport app.use(passport.initialize()); // Protected route using bearer authentication app.get('/api/protected', passport.authenticate('bearer', { session: false }), (req, res) => { // If authentication successful, req.user will be populated const user = req.user as typeof users[0] | undefined; if (user) { res.json({ message: `Hello, ${user.username}! You have access to protected data.` }); } else { res.status(401).json({ message: 'Authentication required.' }); } } ); // Start the server app.listen(PORT, () => { console.log(`Server running on http://localhost:${PORT}`); console.log('Test with: curl -H "Authorization: Bearer a1b2c3d4e5f6" http://localhost:3000/api/protected'); console.log('Test with invalid token: curl -H "Authorization: Bearer wrongtoken" http://localhost:3000/api/protected'); });