node-express-jwt-example
node-express-jwt-example copied to clipboard
Published
20 hours ago •
jmw5598
jmw5598
An example project implementing JWT authentication and role base authorization with Node.js, Express.js, Sequelize, and Sqlite
Node Express JWT Authentication / Authorization Example
An example project implementing JWT authentication and role based authorization.
Demo Setup
- Clone the repository with
git clone https://github.com/jmw5598/node-express-jwt-example.git - Generate RSA256 public private keys and place them in the
configfolder with file namespublic.keyandprivate.key. A 512bit key size should be fine. - Install dependencies with
npm install. - Run migrations and seed that Sqlite database with
sequelize db:migrateandsequelize db:seed:all. - Run the project with
node index.js.
Default Credentials
| Username | Password | Description |
|---|---|---|
| admin | admin | User with ADMIN and USER roles. |
| user | user | User with only USER role. |
Default Routes
| Path | Method | Description |
|---|---|---|
/auth |
POST |
Authenticate user, returns JWT token. Jwt token can the be place in Authorization header prefixed with Bearer |
/users |
GET |
List all users [requires ADMIN role] |
/users |
POST |
Create new user [requires ADMIN role] |
/api/v1/restricted/usersOnly |
GET |
Users only path |
/api/v1/restricted/adminOnly |
GET |
Admin only path |
Middleware Methods
| Method | Description |
|---|---|
verify() |
Verifies token passed in Authorization request header. Token prefixed with Bearer |
hasRole(role) |
Ensures the authenticated user has appropriate role |
hasAnyRole([role, role]) |
Ensures the authenticated user has ANY of the appropriate roles |
hasAllRoles([role, role]) |
Ensures the authenticated user has ALL the appropriate roles |
jmw5598