Passport JWT Strategy Example

jwt-strategy.ts

import JWT from '@core/classes/JWT';
import { JWT_AUDIENCE, JWT_HEADER, JWT_ISSUER, JWT_SECRET } from '@core/constants';
import * as mongoose from 'mongoose';
import { ExtractJwt, Strategy } from 'passport-jwt';

export default async function jwt(passport) {
  const User = mongoose.model('User');
  const options = {
    audience: JWT_AUDIENCE,
    ignoreExpiration: true,
    issuer: JWT_ISSUER,
    jwtFromRequest: ExtractJwt.fromHeader(JWT_HEADER),
    passReqToCallback: true,
    secretOrKey: JWT_SECRET
  };

  const strategy = new Strategy(options, async (req, jwt, done) => {
    try {
      if (!await JWT.isValid(req.header(JWT_HEADER))) {
        return done(new Error('Invalid Token'), null);
      }
      const user = await User.findById(jwt.sub).lean(true);

      if (!user) {
        done(new Error('User does not exists.'), null);
      }

      done(null, user);
    } catch (e) {
      done(e, null);
    }
  });

  passport.use(strategy);
}