Skip to content

Adicionando tempo de expiração do token e melhorando tratamento de segurança #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
amintasvrp wants to merge 6 commits into
base: master
Choose a base branch
from
Open

Adicionando tempo de expiração do token e melhorando tratamento de segurança #96

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
3b03e34
Adicionando tempo de expiração do token e melhor tratamento dele
amintasvrp May 21, 2019
3d3becc
Documentando tempo de expiração do token
amintasvrp May 22, 2019
bf4c29e
Reestruturando linha de definição do token
amintasvrp May 22, 2019
508b892
Refatorando para passar no Travis CI
amintasvrp May 22, 2019
a07e30f
Atualizar documentação da validade do token
amintasvrp May 22, 2019
db5e672
Alterando comentário
amintasvrp May 22, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 14 additions & 2 deletions middlewares/auth.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,13 +2,25 @@ const jwt = require('jsonwebtoken');
const config = require('config');

module.exports = (req, res, next) => {
const token = req.header('Authorization');
if (!token) {
const authHeader = req.header('Authorization');
if (!authHeader) {
const err = new Error('Access denied. No token provided.');
err.status = 401;
return next(err);
}

const parts = authHeader.split(' ');

if (!parts.length === 2) {
return res.status(401).send({ error: 'Token error' });
}

const [scheme, token] = parts;

if (!/^Bearer$/i.test(scheme)) {
return res.status(401).send({ error: 'Token Malformatted' });
}

try {
const decoded = jwt.verify(token, config.get('jwtPrivateKey'));
req.user = decoded;
Expand Down
3 changes: 2 additions & 1 deletion modules/tokenGenerator.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,8 @@ const jwt = require('jsonwebtoken');
const config = require('config');

function sendToken (req) {
const token = jwt.sign({ username: req.body.username }, config.get('jwtPrivateKey'), { expiresIn: '7 days' });
// Validade do Token: 7 dias
const token = jwt.sign({ username: req.body.username }, config.get('jwtPrivateKey'), { expiresIn: 604800 }); // 7 dias em segundos
return token;
}

Expand Down