passport-http-header-token

const express = require('express'); const passport = require('passport'); const HTTPHeaderTokenStrategy = require('passport-http-header-token').Strategy; const app = express(); // Mock User database for demonstration const users = [{ id: 1, username: 'testuser', token: 'mysecrettoken123' }]; passport.use(new HTTPHeaderTokenStrategy( function(token, done) { // In a real application, you would query your database here // for a user associated with the provided token. console.log(`Attempting to authenticate with token: ${token}`); const user = users.find(u => u.token === token); if (!user) { return done(null, false, { message: 'Incorrect token.' }); } return done(null, user); } )); app.use(passport.initialize()); app.get('/api/protected', passport.authenticate('http-header-token', { session: false, failureMessage: true }), function(req, res) { res.json({ message: `Access granted, user: ${req.user.username}` }); } ); app.get('/', (req, res) => { res.send('Welcome! Try GET /api/protected with an Authorization header like: Authorization: mysecrettoken123'); }); const PORT = process.env.PORT || 3000; app.listen(PORT, () => { console.log(`Server running on http://localhost:${PORT}`); console.log('Test with: curl -H "Authorization: mysecrettoken123" http://localhost:3000/api/protected'); console.log('Test failure with: curl -H "Authorization: wrongtoken" http://localhost:3000/api/protected'); });