passport-jwt-mongo-auth.js

import { Strategy, ExtractJwt } from 'passport-jwt';
import passport from 'passport';
import { MongoClient } from 'mongodb';

function authenticateHOF({ mongoUrl, collectionName = 'users' }) {
  const mongoPromise = MongoClient.connect(mongoUrl);

  passport.use(new Strategy(
    {
      jwtFromRequest: ExtractJwt.fromHeader('authorization'),
      secretOrKey: process.env.TOKEN_SECRET,
    },
    async (jwtPayload, done) => {
      const mongo = await mongoPromise;
      const user = await mongo.collection(collectionName).findOne({ _id: jwtPayload.id });
      done(null, user || false);
    },
  ));

  function authenticate(req, res, next) {
    // validate user token if there is one
    // assign the user to req if valid token
    passport.authenticate('jwt', { session: false }, (err, user) => {
      if (user) {
        req.user = user;
      }
      next();
    })(req, res, next);
  }

  return authenticate;
}

export default authenticateHOF;