Secure your code as it's written. Use Snyk Code to scan source code in minutes - no build needed - and fix issues immediately.
{model: UserLogin, as: 'logins'},
{model: UserClaim, as: 'claims'},
{model: UserProfile, as: 'profile'}
]
})
}
/**
* Sign in with auth0.
*/
let callbackURL = '/login/auth0/return'
if (process.env.NODE_ENV === 'development') {
callbackURL = 'http://localhost:3001/login/auth0/return'
}
passport.use(new Auth0Strategy({
domain: env.auth0.CLIENT_DOMAIN,
clientID: env.auth0.CLIENT_ID,
clientSecret: env.auth0.CLIENT_SECRET,
callbackURL,
profileFields: ['name', 'email', 'link', 'locale', 'timezone'],
passReqToCallback: true
}, (req, accessToken, refreshToken, profile, done) => {
/* eslint-disable no-underscore-dangle */
const authenticate = async () => {
let user = null
let userToken = {}
// req.user recived from jwt cookie's token
if (req.user) {
user = await UserLogin.findOne({
attributes: ['name', 'key'],
var app = express();
//
// Set up graphql server
// -----------------------------------------------------------------------------
app.use('/graphql', graphqlHTTP(req => ({
schema,
graphiql: true,
pretty: true
})));
//
// Authentication
// -----------------------------------------------------------------------------
var strategy = new Auth0Strategy({
domain: process.env.AUTH0_DOMAIN,
clientID: process.env.AUTH0_CLIENT_ID,
clientSecret: process.env.AUTH0_CLIENT_SECRET,
callbackURL: process.env.AUTH0_CALLBACK_URL || 'http://localhost:3000/callback'
}, function(accessToken, refreshToken, extraParams, profile, done) {
// accessToken is the token to call Auth0 API (not needed in the most cases)
// extraParams.id_token has the JSON Web Token
// profile has all the information from the user
return done(null, profile);
});
passport.use(strategy);
// you can use this section to keep a smaller payload
passport.serializeUser(function(user, done) {
done(null, user);
export function setupAuth0Passport() {
const strategy = new Auth0Strategy(
{
domain: process.env.AUTH0_DOMAIN,
clientID: process.env.AUTH0_CLIENT_ID,
clientSecret: process.env.AUTH0_CLIENT_SECRET,
callbackURL: `${process.env.BASE_URL}/login-callback`
},
(accessToken, refreshToken, extraParams, profile, done) =>
done(null, profile)
);
passport.use(strategy);
passport.serializeUser((user, done) => {
// This is the Auth0 user object, not the db one
// eslint-disable-next-line no-underscore-dangle
const auth0Id = user.id || user._json.sub;
function setupAuth0Passport() {
const strategy = new Auth0Strategy({
domain: process.env.AUTH0_DOMAIN,
clientID: process.env.AUTH0_CLIENT_ID,
clientSecret: process.env.AUTH0_CLIENT_SECRET,
callbackURL: process.env.AUTH0_LOGIN_CALLBACK
}, (accessToken, refreshToken, extraParams, profile, done) => done(null, profile)
)
passport.use(strategy)
passport.serializeUser((user, done) => {
const auth0Id = (user.id || user._json.sub)
done(null, auth0Id)
})
passport.deserializeUser(wrap(async (id, done) => {
const user = await User.filter({ auth0_id: id })
}),
proxy: true,
resave: false,
saveUninitialized: false,
})
);
router.use(passport.initialize());
router.use(passport.session());
passport.serializeUser((user: any, done: Function) => done(null, user));
passport.deserializeUser((sessionUser: any, done: Function) =>
done(null, sessionUser)
);
if (DOMAIN) {
Auth0Strategy.prototype.authorizationParams = function(options: any) {
var options = options || {};
const params: any = {};
if (options.connection && typeof options.connection === 'string') {
params.connection = options.connection;
}
if (options.audience && typeof options.audience === 'string') {
params.audience = options.audience;
}
params.account_verification = true;
return params;
};
const strategy = new Auth0Strategy(
{