Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/dbartholomae/middy-middleware-jwt-auth
A Middy middleware for authentication via JSON web tokens
https://github.com/dbartholomae/middy-middleware-jwt-auth
jwt lambda microservice middleware middy
Last synced: about 1 month ago
JSON representation
A Middy middleware for authentication via JSON web tokens
- Host: GitHub
- URL: https://github.com/dbartholomae/middy-middleware-jwt-auth
- Owner: dbartholomae
- License: mit
- Created: 2019-02-11T20:32:29.000Z (almost 6 years ago)
- Default Branch: main
- Last Pushed: 2024-04-23T19:26:13.000Z (8 months ago)
- Last Synced: 2024-04-23T23:07:58.942Z (8 months ago)
- Topics: jwt, lambda, microservice, middleware, middy
- Language: TypeScript
- Size: 2.44 MB
- Stars: 24
- Watchers: 3
- Forks: 8
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# middy-middleware-jwt-auth
[](https://npmjs.org/package/middy-middleware-jwt-auth)
[](https://npmjs.org/package/middy-middleware-jwt-auth)
[](https://github.com/dbartholomae/middy-middleware-jwt-auth/issues)
[](https://app.fossa.io/projects/git%2Bgithub.com%2Fdbartholomae%2Fmiddy-middleware-jwt-auth?ref=badge_shield)
[](https://github.com/visionmedia/debug#readme)
[](https://github.com/dbartholomae/middy-middleware-jwt-auth/actions?query=workflow%3A"Build+and+deploy")
[](https://codecov.io/gh/dbartholomae/middy-middleware-jwt-auth)
[](https://github.com/semantic-release/semantic-release#badge)
[](https://cla-assistant.io/dbartholomae/middy-middleware-jwt-auth)
A [middy](https://github.com/middyjs/middy) JSON web token authorization middleware inspired by express-jwt.
## Installation
Download node at [nodejs.org](http://nodejs.org) and install it, if you haven't already.
```sh
npm install middy-middleware-jwt-auth --save
```
## Documentation
There is [additional documentation](https://dbartholomae.github.com/middy-middleware-jwt-auth).
## Usage
```typescript
import createHttpError from "http-errors";
import middy from "@middy/core";
import httpErrorHandler from "@middy/http-error-handler";
import httpHeaderNormalizer from "@middy/http-header-normalizer";
import JWTAuthMiddleware, {
EncryptionAlgorithms,
IAuthorizedEvent,
} from "middy-middleware-jwt-auth";
// Optionally define the token payload you expect to receive
interface ITokenPayload {
permissions: string[];
}
// Optionally define a type guard for the token payload
function isTokenPayload(token: any): token is ITokenPayload {
return (
token != null &&
Array.isArray(token.permissions) &&
token.permissions.every((permission: any) => typeof permission === "string")
);
}
// This is your AWS handler
const helloWorld = async (event: IAuthorizedEvent) => {
// The middleware adds auth information if a valid token was added
// If no auth was found and credentialsRequired is set to true, a 401 will be thrown. If auth exists you
// have to check that it has the expected form.
if (event.auth!.payload.permissions.indexOf("helloWorld") === -1) {
throw createHttpError(
403,
`User not authorized for helloWorld, only found permissions [${event.auth!.permissions.join(", ")}]`,
{
type: "NotAuthorized",
},
);
}
return {
body: JSON.stringify({
data: `Hello world! Here's your token: ${event.auth!.token}`,
}),
statusCode: 200,
};
};
// Let's "middyfy" our handler, then we will be able to attach middlewares to it
export const handler = middy(helloWorld)
.use(httpHeaderNormalizer()) // Make sure authorization header is saved in lower case
.use(httpErrorHandler()) // This middleware is needed do handle the errors thrown by the JWTAuthMiddleware
.use(
JWTAuthMiddleware({
/** Algorithm to verify JSON web token signature */
algorithm: EncryptionAlgorithms.HS256,
/** An optional boolean that enables making authorization mandatory */
credentialsRequired: true,
/** An optional function that checks whether the token payload is formatted correctly */
isPayload: isTokenPayload,
/** A string or buffer containing either the secret for HMAC algorithms, or the PEM encoded public key for RSA and ECDSA */
secretOrPublicKey: "secret",
/**
* An optional function used to search for a token e. g. in a query string. By default, and as a fall back,
* event.headers.authorization and event.headers.Authorization are used.
*/
tokenSource: (event: any) => event.queryStringParameters.token,
}),
);
```