Wie kann ich passagjs google login oauth arbeiten mit JWT anstatt Sitzung durch serialize/deserialize Methode erstellen?

Question

Der folgende Code funktioniert perfekt Wenn ich die serialize/deserialize-Methode passpjs hinzufüge, die eine Sitzung erstellt. Ich arbeite, um Json Web Token, nicht Sitzung zu erstellen. Jedes Tutorium, Vorschlag oder klares Beispiel würde sehr geschätzt werden. Ich benutze nodejs.

Ich verstand die Pro/Con und grundlegende Übersicht, wie JWT funktioniert. Ich habe es aus folgender Quelle gelernt.

1. https://medium.com/@rahulgolwalkar/pros-and-cons-in-using-jwt-json-web-tokens-196ac6d41fb4
2. https://scotch.io/tutorials/the-ins-and-outs-of-token-based-authentication
3. https://scotch.io/tutorials/the-anatomy-of-a-json-web-token
4. https://auth0.com/blog/cookies-vs-tokens-definitive-guide

/

Nein JWT Code

var express = require("express"), 
    path = require("path"), 
    bodyParser = require("body-parser"), 
    mysql = require("mysql"), 
    connection = require("express-myconnection"), 
    morgan = require("morgan"), 
    app = express(), 

    passport = require("passport"), 
    GoogleStrategy = require("passport-google-oauth").OAuth2Strategy; 


app.use(passport.initialize()); 

app.get("/", function(req, res) { 
    res.sendFile(__dirname + "/public/main.html"); 
}); 


// #1 
passport.use(
    new GoogleStrategy({ 
      clientID: "32434m", 
      clientSecret: "23434", 
      callbackURL: "http://localhost:3000/auth/google/callback" 
     }, 
     function(accessToken, refreshToken, profile, done) { 
      process.nextTick(function() { 
       console.log("profile.id: " + profile.id); 
       return done(null, profile.id); // that is being serealized(added in session) 
      }); 
     } 
    ) 
); 

// #1 
app.get("/auth/google", 
    passport.authenticate(
     "google", { 
      scope: ["profile", "email"] 
     })); 

// #2 
app.get("/auth/google/callback", 
    passport.authenticate("google", { 
     failureRedirect: "/google_callback_fail", 
     successRedirect: "/google_callback_success" 
    }) 
); 

app.get("/google_callback_success", isLoggedIn, function(req, res) { 
    res.send("google_callback_success \n"); 
}); 

function isLoggedIn(req, res, next) { 
    console.log("isLoggedIn req.user: " + req.user); 

    if (req.isAuthenticated()) { 
     console.log("isAuthenticated TRUE"); 
     return next(); 
    } 
    res.redirect("/notloggedin"); 
} 

app.get("/notloggedin", function(req, res) { 
    console.log("req.user: " + req.user); 
    res.json("not loggedin"); 
}); 

app.get("/google_callback_fail", function(req, res) { 
    res.json("the callback after google DID NOT authenticate the user"); 
}); 


app.listen(3000); 

JWT-Code-Versuch. Das Problem ist, dass ich serialize/deserialize hinzufügen muss, was ich nicht möchte, da ich keine Sitzung verwenden möchte. Ich will JWT

var express = require("express"), 
    path = require("path"), 
    bodyParser = require("body-parser"), 
    mysql = require("mysql"), 
    connection = require("express-myconnection"), 
    morgan = require("morgan"), 
    app = express(), 

    passport = require("passport"), 
    GoogleStrategy = require("passport-google-oauth").OAuth2Strategy, 

    jwt = require('jsonwebtoken'), 
    passportJWT = require("passport-jwt"), 
    ExtractJwt = require('passport-jwt').ExtractJwt, 
    JwtStrategy = require('passport-jwt').Strategy; 


var jwtOptions = {}; 
jwtOptions.jwtFromRequest = ExtractJwt.fromAuthHeaderAsBearerToken(); 
jwtOptions.secretOrKey = 'secret'; 



app.use(passport.initialize()); 

app.get("/", function(req, res) { 
    res.sendFile(__dirname + "/public/main.html"); 
}); 


// #1 
passport.use(
    new GoogleStrategy({ 
      clientID: "s-s.apps.googleusercontent.com", 
      clientSecret: "23redsf", 
      callbackURL: "http://localhost:3000/auth/google/callback" 
     }, 
     function(accessToken, refreshToken, profile, done) { 
      process.nextTick(function() { 

       console.log("\nprofile.id: " + profile.id); 

       return done(null, profile.id); // that is being serealized(added in session) 
      }); 
     } 
    ) 
); 

// #1 
app.get(
    "/auth/google", 
    passport.authenticate(
     "google", { 
      scope: ["profile", "email"] 
     } 
    ) 
); 

// #2 
app.get(
    "/auth/google/callback", 
    passport.authenticate("google", { 
     failureRedirect: "/google_callback_fail", 
     successRedirect: "/google_callback_success" 
    }) 
); 

app.get("/google_callback_success", isLoggedIn, function(req, res) { 
    var payload = { id: user.id }; 
    var token = jwt.sign(payload, jwtOptions.secretOrKey); 
    var strategy = new JwtStrategy(jwtOptions, function(jwt_payload, next) { 
     console.log('payload received', jwt_payload); 
     console.log('jwt_payload.id: ' + jwt_payload.id); 
    }); 
    passport.use(strategy); 
    res.send("google_callback_success \n" + 'token: ' + token); 
}); 

function isLoggedIn(req, res, next) { 
    console.log("isLoggedIn req.user: " + req.user); 

    if (req.isAuthenticated()) { 
     console.log("isAuthenticated TRUE"); 
     var payload = { id: user.id }; 
     var token = jwt.sign(payload, jwtOptions.secretOrKey); 
     console.log('token: ' + token); 
     return next(); 
    } 
    res.redirect("/notloggedin"); 
} 

app.get("/notloggedin", function(req, res) { 
    console.log("req.user: " + req.user); 
    res.json("not loggedin"); 
}); 

app.get("/google_callback_fail", function(req, res) { 
    res.json("the callback after google DID NOT authenticate the user"); 
}); 

app.get("/logout", function(req, res) { 
    console.log("logged out"); 
    req.logout(); 
    res.redirect("/logout"); 
}); 

app.listen(3000); 

Der Code return done(null, profile.id); // that is being serialized(added in session) das Problem ist. Was soll ich ersetzen, damit ich keine Sitzungen verwenden muss? Ich möchte es durch JWT ersetzen.

Answer 1

https://www.sitepoint.com/spa-social-login-google-facebook/

grundsätzlich nach Google-Authentifizierung erfolgt ist, erstellen Sie eine jwt für den Benutzer.

// src/index.js 
function generateUserToken(req, res) { 
    const accessToken = token.generateAccessToken(req.user.id); 
    res.render('authenticated.html', { 
    token: accessToken 
    }); 
} 

app.get('/api/authentication/google/start', 
    passport.authenticate('google', { session: false, scope: 
    ['openid', 'profile', 'email'] } 
)); 
app.get('/api/authentication/google/redirect', 
    passport.authenticate('google', { session: false }), 
    generateUserToken 
);