requestToken.js

'use strict';

const jwt = require('jsonwebtoken');
const { promisify } = require('../utils/promise');
const lookup = require('../utils/lookup');

const requestToken = async (strategy, req, options) => {
  // Get address from addressField
  const addressField = strategy.deliver.addressField;
  const address = options.allowPost
    ? lookup(req.body, addressField) || lookup(req.query, addressField)
    : lookup(req.query, addressField);

  if (!address) {
    return strategy.fail(
      new Error(options.badRequestMessage || `Missing ${addressField}`),
      400
    );
  }

  // Verify user
  const user = await strategy.verify(address).catch(err => strategy.fail(err));
  if (!user) {
    return strategy.fail(
      new Error(options.authMessage || `No user found`),
      400
    );
  }

  // Generate JWT
  const createToken = promisify(jwt.sign);
  const token = await createToken(
    { user, iat: Math.floor(Date.now() / 1000) },
    strategy.secret,
    { expiresIn: strategy.ttl }
  ).catch(err => strategy.error(err));

  // Deliver JWT
  await strategy.deliver
    .send(user, token, req)
    .catch(err => strategy.error(err));

  // Pass without making a success or fail decision (No passport user will be set)
  // https://github.com/jaredhanson/passport/blob/master/lib/middleware/authenticate.js#L329
  return strategy.pass({ message: 'Token succesfully delivered' });
};

module.exports = requestToken;