HTTP Bearer set header authentication strategy for Passport
npm install passport-http-header-strategyHTTP define header authentication strategy for Passport
$ npm install passport-http-header-strategy
header set header(default authorization)param set use req.body or req.query token name to request(default access_token)passReqToCallback if eturn#### Configure Strategy
``js`
passport.use(new headerStrategy({header: 'X-APP-TOKEN', param: 'app_token', passReqToCallback: true},
function(req, token, done) {
User.findOne({ token: token }, function (err, user) {
if (err) { return done(err); }
if (!user) { return done(null, false); }
return done(null, user, { scope: 'all' });
});
}
));
#### Authenticate Requests
Use passport.authenticate(), specifying the 'bearer' strategy, tosession
authenticate requests. Requests containing bearer tokens do not require session
support, so the option can be set to false`.
For example, as route middleware in an Express
application:
app.get('/profile',
passport.authenticate('header', { session: false }),
function(req, res) {
res.json(req.user);
});