Token signing

Besides the common things like token authorization, the middleware comes with handy functions responsible for token signing.

+ generateToken

The middleware wraps auth0 jsonwebtoken API into more RxJS friendly functions that can be partially applied and composed inside Observable streams.

generateToken signs new JWT token with provided payload and configuration object which defines the way how the token is signed.

Importing

import { generateToken } from '@marblejs/middleware-jwt';

Type declaration

generateToken :: GenerateOptions -> Payload -> string

Parameters

parameter

definition

options

GenerateOptions

payload

Payload = string | object | Buffer

Config object which defines a set of parameters that are used for token signing.

parameter

definition

secret

string | Buffer

algorithm

<optional> string

keyid

<optional> string

expiresIn

<optional> string | number

notBefore

<optional> string | number

audience

<optional> string | string[]

subject

<optional> string

issuer

<optional> string

jwtid

<optional> string

noTimestamp

<optional> boolean

header

<optional> object

encoding

<optional> string

For more details about JWT token signing, please visit jsonwebtoken package docs.

+ generateExpirationInHours

The standard for JWT defines an exp claim for expiration. The expiration is represented as a NumericDate. This means that the expiration should contain the number of seconds since the epoch.

generateExpiratinoInHours is a small, but handy function that returns an numeric date for given hours as a parameter. If the function is called without any parameter then the date is generated with 1 hour expiration.

Importing

import { generateExpirationInHours } from '@marblejs/middleware-jwt';

Type declaration

generateExpirationInHours :: number -> number

Example

token.helper.ts
export const generateTokenPayload = (user: User) => ({
  id: user.id,
  email: user.email,
  exp: generateExpirationInHours(4), 
  // 👆 token will expire within the next 4 hours
});
login.effect.ts
import { generateTokenPayload } from './token.helper';

const login$ = r.pipe(
  r.matchPath('/login'),
  r.matchType('POST'),
  r.useEffect(req$ => req$.pipe(
    map(req => req.body),
    mergeMap(UserDao.findByCredentials),
    map(generateTokenPayload),
    // 👇
    map(generateToken({ secret: Config.jwt.secret })),
    map(token => ({ body: { token } })),
    catchError(() => throwError(
      new HttpError('Unauthorized', HttpStatus.UNAUTHORIZED)
    )),
  )));

Last updated