Daga

Daga

n. Short sword for roman militia.

Acronym for Decent Authentication and GrAnt

Why another authentication library?

1. This library is specifically targeted to API/JWT Authentication otherwise I would have used Shield
2. Because most of the other libraries are too huge.
3. Extending other libraries is a pain.
4. Writing code is fun :-).

Features

Daga is very simple, it offers a route (default is '/login') for database authentication so if you have a JWT token checker you need to exclude it for the database authentication route.

If the login is correct it grants a JWT token otherwise it returns proper json error and status.

The user model must have an id attribute which will be filled with whatever identifier you think useful.

The user model must have a fetch method.

The middleware must be passed a secret like this:

use Daga::Middleware, "/login", { secret: "myawesomelylongandcomplexsecret" }

The response will include an id_token key with the token like this:

{"id_token":"eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI5NiJ9.eyJhdXRoIjoiNjAiNTlkNDAtMDUzTi00OGE4LWI1YzAtOTEwMGExOTNkNGLxIiwic2NvcGVzIjoie1wibG9jYXRpb25zXCI6IFtcImdldFwiXX0iLCJleHAiOjE0NDUwMTk4MDd9.UwyGMLJDLtxshP0e7uE0O4wQACwpHP9VYvj5032NxEA"}