middleware.json

{
  "initial:before": {
    "loopback#favicon": {}
  },
  "initial": {
    "compression": {},
    "cors": {
      "params": {
        "origin": true,
        "credentials": true,
        "maxAge": 86400
      }
    }
  },
  "session": {},
  "auth": {
    "./middleware/authorize": {
      "params": {
        "jwt": "${jwt}"
      }
    }
  },
  "parse": {
    "body-parser#json": {}
  },
  "refresh": {
    "./middleware/refresh-token": {
      "params": {
        "access_token_ttl": "10s",
        "client_secret": "**do_this_in_xyz_local_json**",
        "refresh_token_ttl": "30d",
        "authentication_response_body": {"some": "data"}
      }
    }
  },
  "routes": {
    "loopback#rest": {
      "paths": [
        "${restApiRoot}"
      ]
    }
  },
  "final": {
    "loopback#urlNotFound": {}
  },
  "final:after": {
    "loopback#errorHandler": {}
  }
}