jshaver/walnut.js
1
0
Fork 0
forked from coolaj86/walnut.js
Code Issues Pull Requests Releases Wiki Activity

delete expired token cookies

Browse Source
This commit is contained in:
AJ ONeal 2017-12-05 22:18:03 +00:00
parent f2ad6f127c
commit 66850535d3
1 changed files with 19 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
lib/oauth3.js
View File

@ -22,6 +22,10 @@ function generateRescope(req, Models, decoded, fullPpid, ppid) {
if (!result || !result.sub || !decoded.iss) { if (!result || !result.sub || !decoded.iss) {
// XXX BUG XXX TODO swap this external ppid for an internal (and ask user to link with existing profile) // XXX BUG XXX TODO swap this external ppid for an internal (and ask user to link with existing profile)
//req.oauth3.accountIdx = fullPpid; //req.oauth3.accountIdx = fullPpid;
console.log(decoded);
console.log(decoded.iss);
console.log(fullPpid);
console.log(ppid);
throw new Error("internal / external ID swapping not yet implemented. TODO: " throw new Error("internal / external ID swapping not yet implemented. TODO: "
+ "No profile found with that credential. Would you like to create a new profile or link to an existing profile?"); + "No profile found with that credential. Would you like to create a new profile or link to an existing profile?");
} }
@ -198,6 +202,14 @@ function verifyToken(token) {
try { try {
return jwt.verify(token, require('jwk-to-pem')(res.data), opts); return jwt.verify(token, require('jwk-to-pem')(res.data), opts);
} catch (err) { } catch (err) {
if ('TokenExpiredError' === err.code) {
return PromiseA.reject({
message: 'TokenExpiredError: jwt expired'
, code: 'E_TOKEN_EXPIRED'
, url: 'https://oauth3.org/docs/errors#E_TOKEN_EXPIRED'
});
}
return PromiseA.reject({ return PromiseA.reject({
message: 'token verification failed' message: 'token verification failed'
, code: 'E_INVALID_TOKEN' , code: 'E_INVALID_TOKEN'
@ -220,7 +232,8 @@ function deepFreeze(obj) {
function cookieOauth3(Models, req, res, next) { function cookieOauth3(Models, req, res, next) {
req.oauth3 = {}; req.oauth3 = {};
var token = req.cookies.jwt; var cookieName = 'jwt';
var token = req.cookies[cookieName];
req.oauth3.encodedToken = token; req.oauth3.encodedToken = token;
req.oauth3.verifyAsync = function (jwt) { req.oauth3.verifyAsync = function (jwt) {
@ -251,6 +264,11 @@ function cookieOauth3(Models, req, res, next) {
next(); next();
return; return;
} }
if ('E_TOKEN_EXPIRED' === err.code) {
res.clearCookie(cookieName);
next();
return;
}
console.error('[walnut] cookie lib/oauth3 error:'); console.error('[walnut] cookie lib/oauth3 error:');
console.error(err); console.error(err);
res.send(err); res.send(err);