-
-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* ➕ App >> Adding '@nuxtjs/auth'. * ✨ Login >> Creating Authentication Form and Login page. No function behind it yet. * ✨ Register >> Adding register page. * 🛂 Auth >> Securing frontend pages only accessible after login, except for a few exceptions. * 💄 Sidebar >> Hiding pages if user is not logged in. * 👽️ REST Api >> Adding empty endpoints for user authentication. * ➕ App >> Adding 'mongoose' db. * ➕ App >> Adding 'bcrypt' for encprytion. * 🎨 Controller >> Changing naming for scripts controller. * ➖ App >> Dont wanna mongoose! * ➕ App >> Adding 'lowdb'. Should be enough for my purpose! 😂 * 🎨 Scripts >> Changing controller naming. * 👽️ REST Api >> Adding modul, controller and route to register a user. No checks right now... just dumb registering in a local lowdb database. * ➕ App >> Adding passport and JWT packages. * 🙈 GitIgnore >> Adding database file. * ➕ App >> Adding 'cookie-parser' for express server. * 👽️ REST Api >> Adding login and user authentication handling. * ➕ App >> Nuxt Auth Modul gewechselt. * 👽️ REST Api >> Less response messages on auth routes. * 🏗️ Nuxt/Express >> Changing/separating folder structure. * ➕ App >> Adding "concurrently" for starting multiple scripts at once. * 👽️ Nuxt >> Deactivating Auth for now. * 👽️ REST Api >> Separating routes from app. Also deactivating auth for now. * ⬆️ App >> Updating [email protected] * ♻️ REST Api >> Refactoring Express server. Using ESM Syntax. * ➕ App >> Adding dotenv for using .env variables. * ♻️ REST Api >> Refactoring Auth moduls for ESM Syntax. * 🎨 App >> Activating Auth Modul in Nuxt. Not functioning right now! * 🐛 REST Api >> Bugfixing jwt auth implementation. * 🚨 Linter >> Fixing Linter settings. * 💄 Login >> Showing user info if already logged in. * ✨ Logout >> Sidebar button - logging out. * 💄 App >> Better Update Display. * 👽️ REST Api >> Only allows one user registration right now. Frontend is reacting to this and only displays login/register pages if possible. * 🎨 Auth >> Preparations for creating a secret token if no one exists. * 🔒️ Authentication >> Refactoring the generation of secret key. * 🔥 App >> Removing default nuxt files. * 💥 App >> Changing nuxt to client side rendering. Hole app is gonna served over the express server. * 💥 App >> Changing PM2 starting script. * 🔇 App >> Removing dev log. * ➕ App >> Adding cross-env for setting cross platform env variable. * 🔨 App >> Testing Env setting * 🔊 App >> Changing console.logs for App start. * 🚀 v0.0.1-alpha.2
- Loading branch information
Showing
36 changed files
with
1,411 additions
and
205 deletions.
There are no files selected for viewing
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -91,3 +91,6 @@ sw.* | |
|
|
||
| # Custom user scripts | ||
| /scripts/custom | ||
|
|
||
| # Database | ||
| db.json | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,57 @@ | ||
| // Imports | ||
| import createError from 'http-errors' | ||
| import express from 'express' | ||
| import cors from 'cors' | ||
| import cookieParser from 'cookie-parser' | ||
|
|
||
| // Authentication Import | ||
| import passport from 'passport' | ||
|
|
||
| // Importing Routes | ||
| import baseRoutes from './router.js' | ||
|
|
||
| // Development | ||
| const isDev = process.env.NODE_ENV === 'development' | ||
| console.log('[App] -> Development:', isDev) | ||
|
|
||
| // Config | ||
| const PORT = process.env.PORT || 8800 // Default Port: 8800 | ||
|
|
||
| // Express Init | ||
| const app = express() | ||
| if (isDev) app.use(cors()) // CORS policy only in dev | ||
| app.use(express.static('dist')) | ||
| app.use(express.json()) | ||
| app.use(express.urlencoded({ extended: true })) // for form data | ||
| app.use(cookieParser()) // Cookies | ||
| app.use(passport.initialize()) // Authentication | ||
|
|
||
| // Router/Endpoints | ||
| const baseUrl = '/api/v1' | ||
| baseRoutes(app, baseUrl) | ||
|
|
||
| // Catch 404 and forward to error handler | ||
| app.use((req, res, next) => { | ||
| next(createError(404)) | ||
| }) | ||
|
|
||
| // Error handler | ||
| app.use((err, req, res, next) => { | ||
| console.error('Request Url:', req.originalUrl) | ||
|
|
||
| // Set locals, only providing error in development | ||
| res.locals.message = err.message | ||
| res.locals.error = req.app.get('env') === 'development' ? err : {} | ||
|
|
||
| // Render the error page | ||
| res.status(err.status || 500) | ||
| res.json({ | ||
| _status: 'error', | ||
| err | ||
| }) | ||
| }) | ||
|
|
||
| // Listening on port | ||
| app.listen(PORT, () => { | ||
| console.log(`[App] -> App is running on ${PORT}`) | ||
| }) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,168 @@ | ||
| import { join } from 'path' | ||
| import crypto from 'crypto' | ||
| import fs from 'fs-extra' | ||
| import bcrypt from 'bcrypt' | ||
| import passport from 'passport' | ||
| import LocalStrategy from 'passport-local' | ||
| import JwtStrategy from 'passport-jwt' | ||
| import jwt from 'jsonwebtoken' | ||
| import User from '../models/user.js' | ||
|
|
||
| // const authUserSecret = getAuthUserSecret() // process.env.AUTH_USER_SECRET | ||
| getAuthUserSecret() | ||
|
|
||
| // Returning or if it not exists generating a authentication secret key | ||
| async function getAuthUserSecret() { | ||
| // Getting Env if available | ||
| const secret = process.env.AUTH_USER_SECRET || false | ||
|
|
||
| // If Env variable is not existing, we will generate one | ||
| if (!secret) { | ||
| const generatedKey = crypto.randomBytes(256).toString('hex') | ||
| process.env.AUTH_USER_SECRET = generatedKey | ||
|
|
||
| // Saving key in '.env' file | ||
| const filePath = join('.', '.env') | ||
| const content = `AUTH_USER_SECRET=${generatedKey}` | ||
| await fs.outputFile(filePath, content).catch((error) => { | ||
| console.error(error) | ||
| throw error | ||
| }) | ||
| return generatedKey | ||
| } | ||
| return secret | ||
| } | ||
|
|
||
| // Setting up passport for email/password authentication | ||
| passport.use(new LocalStrategy.Strategy({ usernameField: 'email', passwordField: 'password' }, async function(email, password, done) { | ||
| await User.GetUser(email) | ||
| .then((user) => { | ||
| return user | ||
| }).then(async(user) => { | ||
| if (!user) { | ||
| return done(null, false, { message: 'Authentication failed' }) | ||
| } | ||
| const validation = await comparePasswords(password, user.password) | ||
| if (validation) { | ||
| return done(null, user) | ||
| } else { | ||
| return done(null, false, { message: 'Authentication failed' }) | ||
| } | ||
| }).catch((err) => { | ||
| return done(err) | ||
| }) | ||
| })) | ||
|
|
||
| // Extracting JWT Token out of cookies | ||
| const tokenExtractor = function(req) { | ||
| let token = null | ||
| let reqCookie = null | ||
| let reqHeader = null | ||
|
|
||
| // Extracting 'jwt' token from two different places | ||
| try { | ||
| if (req && req.cookies && req.cookies['auth._token.local']) { | ||
| reqCookie = req.cookies['auth._token.local'] | ||
| } else if (req.req && req.req.cookies && req.req.cookies['auth._token.local']) { | ||
| reqCookie = req.req.cookies['auth._token.local'] | ||
| } else if (req.headers && req.headers && req.headers.authorization) { | ||
| reqHeader = req.headers.authorization | ||
| } else if (req.req.headers && req.req.headers && req.req.headers.authorization) { | ||
| reqHeader = req.req.headers.authorization | ||
| } | ||
| } catch (error) { | ||
| // console.error(error) | ||
| return null | ||
| } | ||
|
|
||
| if (reqCookie) { | ||
| const rawToken = reqCookie.toString() | ||
| token = rawToken.slice(rawToken.indexOf(' ') + 1, rawToken.length) | ||
| } else if (reqHeader) { | ||
| token = reqHeader.slice(reqHeader.indexOf(' ') + 1, reqHeader.length) | ||
| } | ||
| return token | ||
| } | ||
|
|
||
| /* | ||
| const options = { | ||
| // tokenExtractor | ||
| // JwtStrategy.ExtractJwt.fromAuthHeaderAsBearerToken() | ||
| // JwtStrategy.ExtractJwt.fromExtractors([tokenExtractor, JwtStrategy.ExtractJwt.fromHeader('authorization'), JwtStrategy.ExtractJwt.fromAuthHeaderAsBearerToken()]) | ||
| jwtFromRequest: tokenExtractor, | ||
| secretOrKey: process.env.AUTH_USER_SECRET // authUserSecret | ||
| } | ||
| */ | ||
|
|
||
| // Setting up passport for JWT Token authentication | ||
| passport.use(new JwtStrategy.Strategy({ jwtFromRequest: tokenExtractor, secretOrKey: process.env.AUTH_USER_SECRET }, async function(jwtPayload, done) { | ||
| await User.GetUser(jwtPayload.email) // Or 'GetUser' - without 'User.' | ||
| .then((user) => { | ||
| if (user) { | ||
| return done(null, { | ||
| email: user.email | ||
| }) | ||
| } else { | ||
| return done(null, false, 'Failed') | ||
| } | ||
| }) | ||
| .catch((err) => { | ||
| console.error(err) | ||
| return done(err) | ||
| }) | ||
| })) | ||
|
|
||
| /** | ||
| * Take a string and return a generated hash | ||
| * @name generatePasswordHash | ||
| * @function | ||
| * @memberof module:routers/auth | ||
| */ | ||
| async function generatePasswordHash(plainPassword) { | ||
| return await bcrypt.hash(plainPassword, 12) | ||
| } | ||
|
|
||
| // Compares password from plaintext and hashed one | ||
| async function comparePasswords(plainPassword, hashedPassword) { | ||
| return await bcrypt.compare(plainPassword, hashedPassword) | ||
| } | ||
|
|
||
| /** | ||
| * Returns generated token for authentication | ||
| * @name signUserToken | ||
| * @function | ||
| * @memberof module:routers/auth | ||
| */ | ||
| function signUserToken(user) { | ||
| return jwt.sign({ | ||
| id: user.id, | ||
| email: user.email | ||
| }, process.env.AUTH_USER_SECRET) // authUserSecret | ||
| } | ||
|
|
||
| /** | ||
| * Proxy for CreateUser model function - creates a user in database | ||
| * @name CreateUser | ||
| * @function | ||
| * @memberof module:routers/auth | ||
| */ | ||
| async function CreateUser(user) { | ||
| return await User.CreateUser(user) | ||
| } | ||
|
|
||
| /** | ||
| * Proxy for CountUsers model function - counts how many users registered, or returns false | ||
| * @name CountUsers | ||
| * @function | ||
| * @memberof module:routers/auth | ||
| */ | ||
| async function CountUsers() { | ||
| return await User.CountUsers() | ||
| } | ||
|
|
||
| export default { | ||
| CreateUser, | ||
| CountUsers, | ||
| generatePasswordHash, | ||
| signUserToken | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.