2
1
mirror of https://github.com/Thream/socketio-jwt.git synced 2024-07-21 09:38:31 +02:00
Commit Graph

320 Commits

Author SHA1 Message Date
divlo
d5e0dcc69d ci: add npm-publish 2020-12-27 18:42:48 +01:00
divlo
7890ab98ce build(deps): update latest except mocha & socketio 2020-12-27 18:23:20 +01:00
divlo
5cb97809bb chore: add commitlint, husky and release-it 2020-12-27 18:18:34 +01:00
divlo
f66fcdc79b docs: delete changelog and blog post in readme 2020-12-27 18:08:49 +01:00
divlo
8d0670604b docs(readme): update badges & transition to Thream 2020-12-27 17:50:47 +01:00
divlo
379a46fdaf ci: add github actions and dependabot 2020-12-27 17:40:00 +01:00
divlo
2e5d281f46 chore: initial commit 2020-12-27 17:25:44 +01:00
José F. Romaniello
04294c69c5 4.6.2 2020-06-01 09:45:27 -03:00
Conrad Sopala
16fefb61bc
Merge pull request #167 from prmtl/feature/pass-token-header
Pass token header to secret fetching function
2020-01-21 15:43:06 +01:00
Sebastian Kalinowski
e7c826735c Pass token header to secret fetching function
Depending of function arity pass decoded header of the token.
This is to allow backward compatibilty.
2020-01-21 09:41:27 +01:00
Conrad Sopala
5720a50798
Merge pull request #165 from kerolloz/master
Enhance readme
2019-10-29 11:44:50 +01:00
Kerollos Magdy
bcf6c0b719
add example for using customDecoded function 2019-10-29 12:39:38 +02:00
Kerollos Magdy
6af672cca2
fix a minor grammar mistake in README.md 2019-10-29 12:23:42 +02:00
Conrad Sopala
d714939e0d
Merge pull request #164 from kerolloz/master
Add customDecoded optional function
2019-10-28 08:32:15 +01:00
kerollos
0f3aadfccc Add customDecoded optional function
customDecoded enables you to change the value of the decoded token. the decoded token is passed to the function and you can you do whatever you want with the decoded token and return it to be changed.
2019-10-28 01:32:06 +02:00
Conrad Sopala
beff8d38da
Merge pull request #162 from Root-Core/fixure
Improved test coverage
2019-10-15 14:14:28 +02:00
Fabian Arndt
2088d98fcd Merge remote-tracking branch 'upstream/master' into fixure 2019-10-15 13:01:54 +02:00
Fabian Arndt
8c9a31a16b Improved test coverage
- Added tests for handshakes in namespaces (one roundtrip)
- Replaced misleading 'handshake' with 'authentication', where the second roundtrip is used
2019-10-15 12:54:02 +02:00
Conrad Sopala
1c60171179
Merge pull request #155 from Root-Core/matwithonet1
Cherrypicked commits of #105 by matwithonet1
2019-10-14 08:08:36 +02:00
Fabian Arndt
e66148fbb2 Workaround for node 4 2019-10-14 04:13:25 +02:00
Fabian Arndt
8f2b55a7aa Fixed travis
- Tests against Node 4, 8, 10, 12 and newest

Modernized:
- Use arrow functions
- Use string templates in examples and some code
- Use single quote for strings
2019-10-14 01:46:30 +02:00
Fabian Arndt
93e6b59710 Merged with master 2019-10-13 15:55:36 +02:00
Fabian Arndt
27c59c3b0f Fixed auth.required
Misc:
- Resolved conflicts
- Added test case, to fail if server grants prohibited admin access
- Simplified test logic
- Prevented usage of "var" (used const / let instead)
- Formatting
- Cleanup
- Typos
2019-10-13 15:52:14 +02:00
Conrad Sopala
945cb50d0a
Merge pull request #161 from Root-Core/fixes
Fixed regressions of b0cd246 and 3128fdf
2019-10-09 12:11:24 +02:00
Root-Core
31c0a24c87
Semicolon 2019-10-08 19:13:30 +02:00
Fabian Arndt
3f980a5c71 Fixed regressions of b0cd246 and 3128fdf
3128fdf:
- Secret can be a string or function
- Compatibility with older node versions

b0cd246:
- Fixed dependencies
2019-10-08 18:56:18 +02:00
Conrad Sopala
3128fdfee2
Merge pull request #158 from ansien12/patch-1
Add a check to make sure provided secret is a string.
2019-08-09 16:50:23 +02:00
ansien12
67cc0fb846
Add a check to make sure provided secret is a string.
```
const JWTOptions: JwtAuthOptions = {
    secret: process.env.JWT_SECRET as string,
    timeout: 5_000,
    decodedPropertyName: 'decodedToken',
};
```

Without the change I made and the options snipped above where the secret is actualy "undefined" because the .env file wasn't loaded yet you get a really weird situation that's very hard to debug. 

With "undefined" used as secret the client will successfully connect and send its "authenticate" event without a problem. But the server will not do anything. No errors, no timeouts, nothing.
2019-07-30 22:00:08 +02:00
Conrad Sopala
4482bdd1c1
Merge pull request #157 from ProductOfAmerica/master
Fixed problem with not being able to execute. ALL tests are now running.
2019-07-25 09:31:38 +02:00
jeff.smith34r32@gmail.com
196706aef7 Fixed problem with not being able to execute. ALL Tests are now running successfully. 2019-07-24 18:46:06 -07:00
Andrew Kutta
f3becae0a9 update to later version of jsonwebtoken to fix security vulnerabilities - DK/BM
Changes by Root-Core:
- Whitespaces
- Code-Smells
- Some Deps were devDeps
- Little bug fixes (merge errors)
- etc..
2019-07-24 21:05:34 +02:00
Mike Beyer
173e02bbfc change auth message [mb] 2019-07-24 20:44:40 +02:00
Andrew Kutta
211f3af592 whitespace 2019-07-24 20:43:18 +02:00
Mathew Woods
27aaab3161 removed string templating as not supported by node 0.10 - DK/MW 2019-07-24 20:42:23 +02:00
Mathew Woods
7d437b29e6 changed tests to Node 0.10 style - DK/MW 2019-07-24 20:42:23 +02:00
Mathew Woods
17da40f720 updated README to include information about Auth Header Requirement - DK/MW 2019-07-24 20:42:20 +02:00
Mathew Woods
ef0983a702 added ability to enforce only header authorization versus query string authorization - DK/MW 2019-07-24 20:35:44 +02:00
Mathew Woods
2d390e66e6 going to be adding new options but want it within the same general authorizer test suite - DK/MW 2019-07-24 19:01:58 +02:00
Mathew Woods
c694bee8f5 dont instantiate the start function with a function as the options - DK/MW 2019-07-24 19:01:58 +02:00
Mathew Woods
bdbea069ad testing lines of code that are not documented...and documenting them - DK/MW 2019-07-24 19:00:29 +02:00
Conrad Sopala
7902478c82
Merge pull request #153 from Root-Core/patch-2
Update README.md
2019-07-24 17:26:48 +02:00
Conrad Sopala
99177e4344
Merge pull request #106 from Root-Core/patch-1
Fix authentication for namespaces #95
2019-07-24 17:19:22 +02:00
Root-Core
17d5669a3e
Merge branch 'master' into patch-1 2019-07-24 17:15:04 +02:00
Conrad Sopala
5321c3ed9d
Merge pull request #154 from Root-Core/patch-3
Update index.d.ts
2019-07-24 16:57:32 +02:00
Root-Core
d6d3eb66d2
Update index.d.ts
#118
2019-07-24 16:52:32 +02:00
Root-Core
28f9a4e409
Update index.d.ts
- Added cookie option to typings, as added in #134 by @Kaisle
2019-07-24 16:48:32 +02:00
Root-Core
e06fe3d0fc
Update README.md
- Removed text about chrome extension (seems to be irrelevant to this repo)
- Added example for Bearer Token / Authorization Header
- Unified to single quotes
- Added syntax highlighting for bash
- Changed `expiresInMinutes` to `expiresIn` (#117)
- Added hint to run unit tests, before creating a PR
- Split example for socket.io <1 and >=1
2019-07-24 16:40:37 +02:00
Conrad Sopala
b180c24a4c
Merge pull request #116 from Root-Core/typings
Added typescript definition file, exported UnauthorizedError
2019-07-24 16:03:20 +02:00
Conrad Sopala
b0cd246794
Merge branch 'master' into typings 2019-07-24 16:03:10 +02:00
Conrad Sopala
c4b2d37d8c
Merge pull request #152 from Root-Core/patch-2
Fixed merge error
2019-07-24 15:59:21 +02:00