hapi js social login session management

Abierto
  • ¿Algo no está bien?
#238 1 comentario 2 reacciones 0 asignados Ver en GitHub

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
3/5
Tiempo estimado
1-2 días
Aptitud para principiantes
25/100
Tipo de issue
Error
Claridad
Necesita aclaración
Estado de actividad
Estancado
Stack tecnológico
javascript, node.js
Área
authentication, backend

Línea de trabajo

Comienza leyendo la configuración de autenticación y comparando las estrategias utilizadas por /auth/google y /logout. Reproduce el 401 con la configuración indicada de Node 12.16.1, Hapi 11.0.2, Bell y Cookie; después, sigue el rastro de por qué no se acepta la sesión de Cookie establecida; se considera terminado cuando se documente el cambio de configuración necesario.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

support
Support plan
  • is this issue currently blocking your project? (yes):
  • is this issue affecting a production system? (no):
Context
  • node version: 12.16.1
  • module version: 11.0.2
  • environment (e.g. node, browser, native): node
  • used with (e.g. hapi application, another framework, standalone, ...): hapi and bell
  • any other relevant information:
How can we help?

I am using hapi js along with bell and cookie for allowing users to log on to the application using google credentials.

I've defined two strategies. one with bell-google and another with cookie-session. The intention is, once the user logged in, the session needs to be maintained.

I am able to successfully redirect the user to google login page and after successful authentication, able to fetch the user profile.

However, when I access logout API, I am getting the following error.

{"statusCode":401,"error":"Unauthorized","message":"Missing authentication"}

Here is my code. Any guidance to resolve this issue will be highly helpful.

"use strict";

const Bell = require("@hapi/bell");
const Hapi = require("@hapi/hapi");
const Cookie = require("@hapi/cookie");

const init = async () => {
    const server = Hapi.server({
        port: 3000,
        host: "localhost",
        routes: { cors: { origin: ["*"] } },
    });

let plugins = [
    {
        plugin: Bell,
    },
    {
        plugin: Cookie,
    },
];

await server.register(plugins);

server.auth.strategy("session", "cookie", {
    cookie: {
        name: "sid-example",

        // Don't forget to change it to your own secret password!
        password: "this-is-a-32-character-password",

        // For working via HTTP in localhost
        isSecure: false,
    },
});

server.auth.strategy("google", "bell", {
    provider: "google",
    password: "this-is-a-32-character-password",
    isSecure: false,
    clientId: "google-client-id",
    clientSecret: "google-client-secret",
});

server.auth.default("google");

server.route({
    method: "GET",
    path: "/auth/google",
    options: {
        auth: {
            strategy: "google",
            mode: "required",
        },
        handler: function (request, h) {
            if (!request.auth.isAuthenticated) {
                return "Authentication failed due to: " + request.auth.error.message;
            } else {
                let creds = request.auth.credentials;
                request.cookieAuth.set({
                    token: creds.token,
                    email: creds.profile.email,
                });
            }

            return (
                "<pre> response = " +
                JSON.stringify(request.auth.credentials, null, 4) +
                "</pre>"
            );
        },
    },
});

server.route({
    method: "GET",
    path: "/logout",
    handler: (request, h) => {
        return "<pre> logged out successfully </pre>";
    },
    config: {
        auth: {
            mode: "required",
            strategy: "session",
        },
    },
});

await server.start();
console.log("Server running on %s", server.info.uri);
};

process.on("unhandledRejection", (err) => {
    console.log(err);
    process.exit(1);
});

init();
Lenguaje dominante
JavaScript
Estrellas
229
Forks
99
Sin PR fusionados en 30 d

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de hapijs/cookie

Todos los issues de hapijs/cookie

Issues similares

Más issues de JavaScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.