hapi-auth-jwt

hapi-auth-jwt copied to clipboard

Hello, I've upgraded an old Nodejs project to the latest Hapi version... I've read your documentation but I got this error when I start the Nodejs application... Here's my code...

advapiIT

updated hoek as it had vulnarbilities please refer to https://hackerone.com/reports/310439 I also updated Lab and Hapi since it was breaking your test due to os.tmpDir being deprecated.

kraniebrud

this is compatible with hapi v17

Pravasith

getting bad http header format erro

8

{ "statusCode": 400, "error": "Bad Request", "message": "Bad HTTP authentication header format" } kindly help me to resolve it i am new to hapi

gmchaturvedi1

Regular Expression Denial of Service (ReDoS)

2

hapi-auth-jwt requires an old version of `jsonwebtoken` (5.x), which depends on `ms` which has a ReDoS vulnerability. Please update `jsonwebtoken` to use at least 7.4.1 which has fixed this issue....

petey

I need two keys. One for api key (the vendor of the service with the scope) and the authorization key (the user's only).

smart--petea

how can we put the Token in blacklist so it will be not accessible anymore same like require('express-jwt-blacklist')

Dhaval8087

Allows passing the jwt token via the query string

2

fdidron

Dynamically resolve key based on token

16

In order to easily support multi tenant scenarios, it would be useful to have optionally have a callback function take the JWT and return the key. To keep the API...

dschenkelman

Updated README with instructions on how to use dynamic keys function

1

I've merged the latest from your master branch and updated the README with instructions on how to use the dynamic keys function. Closes #9 and includes #10

eventhough