how to handle jwt auth?

[ralyodio]

I cannot seem to get jwt authentication to work.

I have no idea what I'm doing really here, just trying to follow the "session" example in Growing section....but this is incomplete.

It appears the token is not being persisted from the signin or signup methods.

//controller
export default class Controller {
  // Render template "example/welcome.html.tmpl" with message
  async register(ctx) {
    ctx.stash.msg = "Register  now";
    await ctx.render();
  }

  async login(ctx) {
    ctx.stash.msg = "Login now";
    await ctx.render();
  }

  async loggedIn(ctx) {
    console.log("account#loggedIn");
    const session = await ctx.session();
    console.log("stash: ", ctx.stash);
    session.token = ctx.stash.token;
    console.log("session: ", session);

    if (session.token !== undefined) return;

    await ctx.redirectTo("account#login");

    return false;
  }

  async signin(ctx) {
    const user = (await ctx.params()).toObject();
    const token = await ctx.models.account.signin(user);
    const flash = await ctx.flash();

    ctx.stash.token = token;
    flash.message = "Thanks for logging in.";

    await ctx.redirectTo("account#me");
  }

  async create(ctx) {
    const user = (await ctx.params()).toObject();
    //todo try/catch
    const token = await ctx.models.account.create(user);
    const flash = await ctx.flash();

    ctx.stash.token = token;
    flash.message = "Thanks for signing up.";

    await ctx.redirectTo("account#me");
  }

  async logout(ctx) {
    const session = await ctx.session();
    session.expires = 1;
    const flash = await ctx.flash();

    flash.message = "You have been logged out.";
    await ctx.redirectTo("account#login");
  }

  async me(ctx) {
    const session = await ctx.session();
    // const { token } = ctx.stash;

    console.log("acccount/me");
    console.log("session: ", session);
    console.log("stash: ", ctx.stash);
    await ctx.render();
  }
}

index.js

import mojo, { yamlConfigPlugin } from "@mojojs/core";
import Surreal from "surrealdb.js";
import { Account } from "./models/account.js";

export const app = mojo();

app.plugin(yamlConfigPlugin);
app.secrets = app.config.secrets;

app.addAppHook("app:start", async (app) => {
  if (!app.models.db) {
    app.models.db = new Surreal("http://127.0.0.1:8000/rpc");
    await app.models.db.signin({
      user: "root",
      pass: "root",
    });

    await app.models.db.use("purelygigs", "purelygigs");
  }

  app.models.account = new Account(app.models.db);
});

app.get("/").to("example#welcome");
app.get("/register").to("account#register");
app.post("/register").to("account#create");
app.get("/login").to("account#login").name("account#login");
app.post("/login").to("account#signin");

const loggedIn = app.under("/").to("account#loggedIn");
loggedIn.get("/account/me").to("account#me").name("account#me");

app.start();

models

export class Account {
  constructor(db) {
    this.db = db;
  }

  async create(user) {
    const { email, username, password, password2 } = user;

    if (password !== password2) {
      throw new Error("Passwords do not match");
    }

    console.log(user);

    let token = await this.db.signup({
      NS: "purelygigs",
      DB: "purelygigs",
      SC: "allusers",
      email,
      username,
      password,
    });

    console.log("token: ", token);
    return token;
  }

  async signin(user) {
    const { email, password } = user;

    console.log(user);

    let token = await this.db.signin({
      NS: "purelygigs",
      DB: "purelygigs",
      SC: "allusers",
      email,
      password,
    });

    console.log("token: ", token);

    return token;
  }
}

[kraih]

There is no jwt anywhere in your example code. I don't understand the question. Use a third party library like jsonwebtoken if you really need jwt.