763875a15b
- @tryghost/job-manager@0.8.5 - @tryghost/limit-service@0.4.4 - @tryghost/mw-session-from-token@0.1.20 - @tryghost/package-json@0.1.0 - @tryghost/session-service@0.1.21 - @tryghost/zip@1.1.13 |
||
---|---|---|
.. | ||
lib | ||
test | ||
types | ||
.eslintignore | ||
.eslintrc.js | ||
index.js | ||
LICENSE | ||
package.json | ||
README.md | ||
tsconfig.json |
Session From Token Middleware
Middleware to handle generating sessions from tokens, for example like with magic links, or SSO flows similar to SAML.
Install
npm install @tryghost/mw-session-from-token --save
or
yarn add @tryghost/mw-session-from-token
Usage
const sessionFromTokenMiddleware = require('@tryghost/mw-session-from-token')({
callNextWithError: true,
async createSession(req, res, user) {
req.session.user_id = user.id;
},
async getTokenFromRequest(res) {
return req.headers['some-cool-header'];
},
async getLookupFromToken(token) {
await someTokenService.validate(token);
const data = await someTokenService.getData(token);
return data.email;
},
async findUserByLookup(lookup) {
return await someUserModel.findOne({email: lookup});
}
});
someExpressApp.get('/some/sso/url', someSessionMiddleware, sessionFromTokenMiddleware, (req, res, next) => {
res.redirect('/loggedin');
}, (err, res, res, next) => {
res.redirect('/error');
});
Develop
This is a mono repository, managed with lerna.
Follow the instructions for the top-level repo.
git clone
this repo &cd
into it as usual- Run
yarn
to install top-level dependencies.
Run
yarn dev
Test
yarn lint
run just eslintyarn test
run lint and tests
Copyright & License
Copyright (c) 2013-2021 Ghost Foundation - Released under the MIT license.