using multiple authentication strategies in hapijs

moduleA.js

const register = async server => {
  server.route([
    {
      path: '/moduleA/info',
      method: 'GET',
      handler: request => {
        return 'this is from moduleA/info'
      }
    }
  ])
}

exports.plugin = {
  register,
  name: 'moduleA',
  version: '1.0.0'
}

server.js

const Hapi = require('hapi')

const init = async () => {
  const server = new Hapi.Server({
    port: 8080,
    routes: {
      auth: {
        strategies: ['simple', 'alternative']
      }
    }
  })

  await server.register([
    {
      plugin: require('hapi-auth-basic')
    },
    {
      plugin: require('hapi-auth-bearer-token')
    }
  ])

  server.auth.strategy('simple', 'basic', {
    validate: (request, u, p) => {
      // use db lookup in real world
      if (u === 'user1' && p === 'pass1') {
        return {
          isValid: true,
          credentials: { name: 'user1' }
        }
      }
      return {
        isValid: false,
        credentials: null
      }
    }
  })
  server.auth.strategy('alternative', 'bearer-access-token', {
    allowQueryToken: true,
    validate: (request, token, h) => {
      // use db lookup in real world
      const isValid = token === 'token1'
      const credentials = { token }

      return { isValid, credentials }
    }
  })

  server.auth.default('simple')

  // note the following module has to register after the server.auth.* calls
  await server.register([
    {
      plugin: require('./moduleA')
    }
  ])

  await server.start()
  console.log(`server started at ${server.info.uri}`)
}

init()