@rss/common-nodejs

RSS shared Node.js library for cross cutting concerns.

- axios http helper
- env and secrets loading
- mongo connection
- redis/in-memory cacher
- logger and express logging and error middleware
- openid client
- openid helper
- openid strategy
- passport authentication strategy
- start child process
- shared services like relationships, workflow, etc.

Installation

``bash
$ npm install @rss/common-nodejs
`

Auth

#### OpenId Client

openIdClient must be initialized before calling any other rss apps.

`js
const { env, secret, openIdClient } = require('@rss/common-nodejs');
await openIdClient.init(env.OPENID_URL, { client_id: secret.CLIENT_ID, client_secret: secret.CLIENT_SECRET });
`

`js
const accessToken = await openIdClient.accessToken();
`

#### Passport Auth Strategy

The RSS authentication strategy authenticates users using a token passed in on the Authorization request header.
The strategy requires a verify callback, which accepts a valid decoded token and calls done providing a user.

`js
passport.use(
openIdStrategy(env.OPENID_URL, (red, claim, done) => {
done(null, claim);
}),
);
`

#### Authenticate Requests

Use passport.authenticate(), specifying the 'jwt' strategy, to authenticate requests.

`js
app.use(passport.authenticate('jwt', { session: false }));
app.use('/api/sample', authz(['SCOPE']), require('./sample.routes'));
`

#### Token Types

This strategy takes an hash value with the following options

- session` - Options, save user to session - should be set to false