hapijs / hapijs/cookie

hapi js social login session management

Open
#238 1 comment 2 reactions 0 assignees View on GitHub
support
Dominant language
JavaScript
Stars
229
Forks
99
PR merge metrics
No merged PRs in 30d

Description

#### Support plan

* *is this issue currently blocking your project?* (yes):
* *is this issue affecting a production system?* (no):

#### Context

* *node version*: 12.16.1
* *module version*: 11.0.2
* *environment* (e.g. node, browser, native): node
* *used with* (e.g. hapi application, another framework, standalone, ...): hapi and bell
* *any other relevant information*:

#### How can we help?

I am using hapi js along with bell and cookie for allowing users to log on to the application using google credentials.

I've defined two strategies. one with bell-google and another with cookie-session. The intention is, once the user logged in, the session needs to be maintained.

I am able to successfully redirect the user to google login page and after successful authentication, able to fetch the user profile.

However, when I access logout API, I am getting the following error.

```js
{"statusCode":401,"error":"Unauthorized","message":"Missing authentication"}
```

Here is my code. Any guidance to resolve this issue will be highly helpful.

```js
"use strict";

const Bell = require("@hapi/bell");
const Hapi = require("@hapi/hapi");
const Cookie = require("@hapi/cookie");

const init = async () => {
const server = Hapi.server({
port: 3000,
host: "localhost",
routes: { cors: { origin: ["*"] } },
});

let plugins = [
{
plugin: Bell,
},
{
plugin: Cookie,
},
];

await server.register(plugins);

server.auth.strategy("session", "cookie", {
cookie: {
name: "sid-example",

// Don't forget to change it to your own secret password!
password: "this-is-a-32-character-password",

// For working via HTTP in localhost
isSecure: false,
},
});

server.auth.strategy("google", "bell", {
provider: "google",
password: "this-is-a-32-character-password",
isSecure: false,
clientId: "google-client-id",
clientSecret: "google-client-secret",
});

server.auth.default("google");

server.route({
method: "GET",
path: "/auth/google",
options: {
auth: {
strategy: "google",
mode: "required",
},
handler: function (request, h) {
if (!request.auth.isAuthenticated) {
return "Authentication failed due to: " + request.auth.error.message;
} else {
let creds = request.auth.credentials;
request.cookieAuth.set({
token: creds.token,
email: creds.profile.email,
});
}

return (
"

 response = " +

JSON.stringify(request.auth.credentials, null, 4) +
"
"
);
},
},
});

server.route({
method: "GET",
path: "/logout",
handler: (request, h) => {
return "

 logged out successfully 
";
},
config: {
auth: {
mode: "required",
strategy: "session",
},
},
});

await server.start();
console.log("Server running on %s", server.info.uri);
};

process.on("unhandledRejection", (err) => {
console.log(err);
process.exit(1);
});

init();
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.