https://github.com/keratin/authn-node
NodeJS client library for Keratin AuthN
https://github.com/keratin/authn-node
api-client authentication authn
Last synced: 5 months ago
JSON representation
NodeJS client library for Keratin AuthN
- Host: GitHub
- URL: https://github.com/keratin/authn-node
- Owner: keratin
- License: lgpl-3.0
- Created: 2020-04-14T15:44:25.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2024-03-26T12:52:47.000Z (over 2 years ago)
- Last Synced: 2025-10-04T17:40:59.892Z (9 months ago)
- Topics: api-client, authentication, authn
- Language: TypeScript
- Size: 563 KB
- Stars: 0
- Watchers: 1
- Forks: 2
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE-LGPLv3
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# Keratin AuthN
Keratin AuthN is an authentication service that keeps you in control of the experience without forcing you to be an expert in web security.
This gem provides utilities to help integrate with the backend of a NodeJS application. You will also
need a client for your frontend, such as [keratin/authn-js](https://github.com/keratin/authn-js).
[](https://gitter.im/keratin/authn-server?utm_source=badge&utm_medium=badge&utm_campaign=pr-badge)
[](https://travis-ci.org/keratin/authn-rb)
## Installation
```
yarn add @keratin/authn-node
```
## Usage
```js
import AuthN from "@keratin/authn-node";
const authn = new AuthN({
// The AUTHN_URL of your Keratin AuthN server. This will be used to verify tokens created by AuthN,
// and will also be used for API calls unless `adminURL` is also set (see below).
issuer: "https://authn.myapp.com",
// The domains of your application (no protocol). These domain should be listed in the APP_DOMAINS of
// your Keratin AuthN server.
audiences: ["myapp.com"],
// OPTIONAL: Send private API calls to AuthN using private network routing. This can be necessary
// if your environment has a firewall to limit public endpoints.
adminURL: "https://authn.internal.dns/",
// Credentials for AuthN's private endpoints. These will be used to execute admin actions using the
// `Keratin.authn` client provided by this library.
//
// TIP: make them extra secure in production!
username: "secret",
password: "secret",
// OPTIONAL: Specify how long keys should remain cached in the keychain, in minutes.
keychainTTL: 60, // minutes
});
```
### Reading the Session
Use `Keratin::AuthN.subject_from(params[:authn])` to fetch an `account_id` from the session if and
only if the session is valid.
### Modifying Accounts
Unimplemented in this release.
### Example
You should store the token in a cookie or header (the [keratin/authn-js](https://github.com/keratin/authn-js)
integration can do this automatically) and continue using it to verify a logged-in session:
```js
// your token may be in a cookie or a header, depending on your client configuration.
const token = req.headers.authorization.replace(/Bearer/, "").trim();
// subjectFrom will return an AuthN account ID that you can use to identify the user.
let accountID;
try {
accountID = await authn.subjectFrom(token);
} catch (e) {
if (e instanceof JsonWebTokenError) console.error(e);
else throw e;
}
// create a user during signup with the accountID
User.create({ name, email, accountID });
// use the accountID to find the current user later
User.find({ accountID });
```
## Contributing
Bug reports and pull requests are welcome on GitHub at https://github.com/keratin/authn-node. This project is intended to be a safe, welcoming space for collaboration, and contributors are expected to adhere to the [Contributor Covenant](http://contributor-covenant.org) code of conduct.