This package is now deprecated, and should not be considered secure and will not be maintained

uw-lib-auth.js

A node.js module providing universal auth implementation for use in utilitywarehouse service implementation.

OAuth2 + JWT

This handler applies if a Authorization: Bearer <token> header is present. JWT verification is implemented using a private/public key pair where private part is held secretly by issuing server (uw-service-shepherd) and public key is issued to implementing services.

Extending with your own handlers

The module exposes an 'abstract' class module.Method.Method that your handler needs to be extending. You are required to implement following methods:

• applies(headers hash) : bool - a synchronous function accepting a hash of request headers (all lowercase) that returns true if the correct header is present
• execute(headers hash, callback fn(err, result)) : void - an asynchronous function accepting a hash of request headers and a result callback, any result out of the auth process can be passed in the callback and will be attached to reques

Usage

1const express = require('express');
2const path = require('path');
3const app = express();
4
5const authModule = require('./..');
6
7const auth = new authModule.Provider([
8	new authModule.Method.oAuth2JWT({
9		key: authModule.Key.fromFile(path.join(__dirname, '../tests/resources/public.pem')),
10		algo: [authModule.Key.RS256]
11	})
12]);
13
14app.use(auth.middleware());
15
16app.get('/:id', /*auth.middleware.scope('partner.:id.read'),*/ function (req, res) {
17  res.json({auth: req.auth});
18});
19
20app.use((error, req, res, next) => {
21	res.status(error.status).json(error);
22});
23
24app.listen(3000, function () {
25  console.log('Example app listening on port 3000!')
26})

NPM

Lib is published on NPM under the utilitywarehosue namespace. It is public.

yarn add @utilitywarehouse/uw-lib-auth.js