JWT for authentication

yarn add jsonwebtoken
yarn add -D @types/jsonwebtoken
 
yarn add permit
yarn add -D @types/permit

import jwt from 'jsonwebtoken'
 
export const jwtConfig = {
    secret: "shhhhhhhhhhhh",
    sessionConfig: {
        expiresIn: "24h" 
    },
};
 
// For encode object to token
export function encodeDataToJwt(payload: object): string {
    return jwt.sign(
        payload,
        jwtConfig.secret,
        { ...jwtConfig.sessionConfig }
    );
}
 
// For decode token to object
export function decodeDataInJwt(token: string): object{
    return jwt.verify(token, jwtConfig.secret);
}

// Your jwt token
const token = "ejijijafas.vsofnsafas.safaoksfo"
 
const res = await fetch( "http://localhost:8080/api" ,{
    method:"POST",
    headers:{ 
        "Authorization" : `Bearer ${token}`,
        "Content-Type"  : "application/json"
    },
    body: JSON.stringify({
        id: 10,
        name: "Peter"
    });
});

import { Bearer } from 'permit';
import { encodeDataToJwt } from './jwtUtils';
 
const permit = new Bearer({
    query: 'access_token',
})
 
export function isLoginGuard(
    req:express.Request,
    res:express.Response,
    next:express.NextFunction
){
    try {
        
        // Auto check headers from fetch like: 
        // Authorization: `Bearer ${token}`
        const token = permit.check(req);
    
        if(!token){
            throw new Error("Missing jwt token.")
        }
    
        const payload = decodeDataToJwt(token);
        console.log(payload);
        
        // Check users data here if you want
        // With DB or others method
 
        return next();
    } 
    catch (error:any) {
        return res.status(401).json({ status: false, msg: "Permission Denied." });
    }
 
}

import express, { Request, Response } from "express";
import { encodeDataToJwt } from "./jwtUtils"
import { isLoginGuard } from "./guard"
 
export const usersRouter = express.Router();
    
usersRouter.get('/dummyLogin', (req: Request, res: Response) => {
    return res.status(200).json({ status: true, jwt: encodeDataToJwt({ name: "tom" }) })
});
 
usersRouter.get('/somePrivateApi', isLoginGuard , (req: Request, res: Response) => {
    return res.status(200).json({ status: true })
});

curl -H 'Accept: application/json' -H "Authorization: Bearer ${TOKEN}" https://localhost:8080/somePrivateApi