Upgrade passport-jwt & jsonwebtoken

To address security issues. Some minor code changes required to match.
TheCacophonyProject · Jun 28, 2018 · 680083e · 680083e
1 parent 64d52a3
commit 680083e
Show file tree

Hide file tree

Showing 4 changed files with 5,395 additions and 264 deletions.
diff --git a/api/middleware.js b/api/middleware.js
@@ -11,7 +11,7 @@ const { body, check, header, validationResult, query } = require('express-valida
  */
 const authenticate = function(type) {
   return header('Authorization').custom(async (value, {req}) => {
-    const token = ExtractJwt.fromAuthHeader()(req);
+    const token = ExtractJwt.fromAuthHeaderWithScheme('jwt')(req);
     if (token == null) {
       throw new Error('could not find JWT token');
     }