1.0.0

Author: maxprog

.env

@@ -0,0 +1,4 @@
+AUTH0_CLIENT_ID=J2Yxx9kSZ4llxOtbMjpiAGGM2P30EdQE
+AUTH0_DOMAIN=jrbsystem.auth0.com
+AUTH0_SECRED_KEY=P-mJNkdG8KD-M4tllmtaueG4w2vTmg0Q0__O6oqGQGds97PinUQTFsJEnCt3Eldy
+LOCAL_JWT_SECRET=WTQYAYYXBBAANKSNCLKFNLVLJDBVLJDS

.gitignore

@@ -0,0 +1 @@
+index.html

README.md

@@ -0,0 +1,25 @@
+# Socket.io - token based authentiction
+
+## Modules
+/module/mainSocketLocalToken.js - token based authentiction on local generated token
+
+## Installation
+
+
+1. Install the all necesary modules and packages in project directory
+  
+  ```
+npm install 
+  ```
+
+
+
+
+2. Start the server from the root directory of project
+
+  
+  ```
+npm start
+  ```
+
+3. Visit http://localhost:3000

database/db.js

@@ -0,0 +1,11 @@
+const Users=[
+    { "id": 1, "firstName": "Greg", "lastName": "Kroczek", "email": "[email protected]", "password": "123456", "auth0_user_id": "google-oauth2|113980109958968827572" },
+    { "id": 2, "firstName": "Peter", "lastName": "mortsen", "email": "[email protected]", "password": "asasf", "auth0_user_id": "google-oauth2|13434010995896886847" },
+    { "id": 3, "firstName": "Anna", "lastName": "Kroczek", "email": "[email protected]", "password": "1wefewf", "auth0_user_id": "google-oauth2|138975983745878457395" },
+    { "id": 4, "firstName": "Andrew", "lastName": "McGregor", "email": "[email protected]", "password": "wqdewfwf", "auth0_user_id": "google-oauth2|423846783467326472837" },
+    { "id": 5, "firstName": "Jodie", "lastName": "Trauss", "email": "[email protected]", "password": "wefewf", "auth0_user_id": "google-oauth2|237489231748974385754" },
+     { "id": 12, "firstName": "Greg", "lastName": "Kroczek", "email": "[email protected]", "password": "123456", "auth0_user_id": "google-oauth2|113980109958968827572" },
+   
+];
+
+module.exports=Users;

modules/lib/message.js

@@ -0,0 +1,27 @@
+
+exports.broadcast = function(data){
+    try{
+    
+        if (!security.verifyConnection(socket,data)) return;
+        
+        var obj = {org:data.org,topic:data.topic,message:data.message};
+        console.log('socket.io broadcast:',obj);
+        clients.forEach(function(client) {
+            client.emit('message', obj);
+            }
+        );
+
+    }catch(ex){
+        console.log('socket.io: Error during sending message to clients ');
+    }
+}
+
+
+exports.sendError = function(socket, message) {
+
+          return socket.emit('error', {
+              message: message
+          });
+   
+
+};

modules/lib/security.js

@@ -0,0 +1,177 @@
+const    _  = require('lodash'),
+      jwt = require('jsonwebtoken');
+
+
+
+const func = (socket,data) => {
+    return new Promise((resolve, reject) => {
+                
+                verifyConnection(socket,data);
+    });
+};
+
+exports.verifyConnection = func;
+
+const verifyConnection = function(socket, data) {
+
+    var token = data && data.token || null;
+
+    if(!token || !clients[socket.id])
+    {
+        console.log('Unauthorized access: access denied');
+        message.sendError(socket,'Invalid email or password');  
+        //reject(false);
+        return false; 
+    }
+    
+    if (token) 
+    {
+   
+        jwt.verify(token, jwtSecret, function(err, decoded) 
+        {
+            if (err) 
+            {
+             
+                console.log(err);
+                 message.sendError(socket,'Invalid email or password');
+                  //reject(false);
+                return false;
+             }
+
+
+            let userID = decoded.id;
+         
+             let user = _.find(users,{id:userID});
+             console.log('founded user',user);
+             if(!user) {
+                         console.log('!user:false');
+                         message.sendError(socket, 'Invalid email or password');
+                          //reject(false);
+                         return false;
+                         }
+                  else {  
+                            console.log('user:true'); 
+                             //reject(true);
+                            return true; }
+
+         });
+    }
+    
+};
+
+
+const func2 = (socket,data) => {
+    return new Promise((resolve, reject) => {
+      
+       verifyConnectionAuth0(socket,data);
+       
+    });
+};
+
+
+
+exports.verifyConnection = func2;
+
+exports.verifyConnectionAuth0 = function(socket, data) {
+
+   
+    var token = data && data.token || null;
+   
+
+    if(!token || !clients[socket.id])
+    {
+        console.log('Unauthorized access: access denied');
+        message.sendError(socket,'Invalid email or password');  
+         //reject(false);
+        return false; 
+    }
+    
+    if (token) 
+    {
+   
+        jwt.verify(token, jwtSecret, function(err, decoded) 
+        {
+            if (err) 
+            {
+             
+                console.log(err);
+                 message.sendError(socket,'Invalid email or password');
+                  //reject(false);
+                return false;
+             }
+
+
+            let auth0UserID = decoded.sub;
+         
+        
+        
+             let user = _.find(users,{auth0_user_id:auth0UserID});
+              
+             if(!user) {
+                         message.sendError(socket, 'Invalid email or password');
+                          //reject(false);
+                         return false;
+                         }
+                  else { 
+                       //reject(true);
+                        return true; 
+                    }
+
+         });
+    };
+    
+};
+
+exports.authenticateUser = function authenticateUser (socket, data) {
+
+  const {email,password}=data;
+  
+  
+  if(!email || !password)   return message.sendError(socket,'Invalid email or password');
+
+    const user = _.find(users,{email:email,password:password});
+   
+    
+    if(!user) {
+        return message.sendError(socket,'Invalid email or password');
+    }
+     else
+            {
+                    return loginUser(socket, user);
+            }
+   
+};
+
+
+const loginUser = function loginUser(socket, user) {
+
+    var profile = {
+      firstName: user.firstName,
+      lastName: user.lastName,
+      email: user.email,
+      id: user.id
+    };
+
+   
+   //expiresIn: expressed in seconds or a string describing a time span zeit/ms. Eg: 60, "2 days", "10h", "7d"
+    var token = jwt.sign(profile, jwtSecret, {
+      expiresIn: 360
+    });
+
+  var data =  {profile: profile, token:token};
+    socket.emit('login.success', data);
+   
+    clients[socket.id]=data;
+    //clients[token]=data;
+    console.log('User logged to socket.io. Number of connections',NumberOfConnections(),' user=',profile);
+
+   
+    return;
+
+  
+};
+
+
+
+
+

modules/lib/user.js

@@ -0,0 +1,40 @@
+const  _  = require('lodash');
+
+exports.getUser = function (socket, data) {
+
+/*
+security.verifyConnection(socket,data).then(function(result) {
+   console.log('Access allowed to getUser()');
+  if(!data.id) return socket.emit('user.success', null);
+  const user = _.find(users,{id:data.id});
+   var profile = (user)? {
+      firstName: user.firstName,
+      lastName: user.lastName,
+      email: user.email,
+      id: user.id
+    } : null;
+
+  return socket.emit('user.success', profile);
+}, function(err) {
+  console.log('Access denied to getUser()'); return;
+});
+*/
+
+  // Emit an error if the token is invalid
+  if (!security.verifyConnection(socket,data)) { console.log('Access denied to getUser()'); return; }
+
+  console.log('Access allowed to getUser()');
+  
+  if(!data.id) return socket.emit('user.success', null);
+
+  const user = _.find(users,{id:data.id});
+   var profile = (user)? {
+      firstName: user.firstName,
+      lastName: user.lastName,
+      email: user.email,
+      id: user.id
+    } : null;
+
+  return socket.emit('user.success', profile);
+
+};

modules/mainSocketLocalToken.js

@@ -0,0 +1,78 @@
+
+/* 
+Local generated token
+*/
+
+const user = require('./lib/user'),
+     socketio = require('socket.io');
+     
+     let clients  = {};
+     
+
+global.clients = clients;
+global.users = require('../database/db.js');
+global.message =  require('./lib/message');
+global.security =  require('./lib/security');
+global.jwtSecret = process.env.LOCAL_JWT_SECRET;
+global.NumberOfConnections = function() {
+    return Object.keys(clients).length;
+}
+
+
+
+exports.connect = function(server){
+  
+        var io = socketio.listen(server);
+      
+       
+        io.on('connection', function (socket) {
+            
+            console.log('socket.io: new connection, current number of connections:',NumberOfConnections());
+              //Get User   
+              socket.on('getUser', function (data) {
+                   console.log('socket.io: call getUser');
+                 user.getUser(socket, data);
+               });
+
+                socket.on('message', function (data) {
+                 message.broadcast(data);
+               });
+
+               // Login
+                socket.on('login', function (data) {
+                    security.authenticateUser(socket, data);
+                });
+
+                // Logout
+                socket.on('logout', function (token) {
+                      clients[socket.id] && delete clients[socket.id];
+                     console.log('close connection, number of connections:',NumberOfConnections());
+                  
+                });
+
+
+
+            socket.on('disconnect', function () {
+                 clients[socket.id] && delete clients[socket.id];
+                console.log('close connection, number of connections:',NumberOfConnections());
+                
+
+            });
+        });
+
+        io.on('end', function() {
+            
+            console.log('socket.io: terminate server socket.io', NumberOfConnections());
+
+        });
+
+
+
+
+
+  
+}
+
+
+
+