pathToRegexp triggers "Missing parameter name" on startup of example code

[gischer]

The example server code is throwing a Syntax error. I cut and pasted the server code into a brand-new Meteor app.

I get the following error:

W20250123-09:46:58.689(-8)? (STDERR) packages/core-runtime.js:189
W20250123-09:46:58.689(-8)? (STDERR)             throw error;
W20250123-09:46:58.689(-8)? (STDERR)             ^
W20250123-09:46:58.689(-8)? (STDERR) 
W20250123-09:46:58.689(-8)? (STDERR) TypeError: Missing parameter name at 8: https://git.new/pathToRegexpError
W20250123-09:46:58.689(-8)? (STDERR)     at name (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:153:13)
W20250123-09:46:58.689(-8)? (STDERR)     at lexer (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:171:21)
W20250123-09:46:58.689(-8)? (STDERR)     at lexer.next (<anonymous>)
W20250123-09:46:58.689(-8)? (STDERR)     at Iter.peek (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:188:32)
W20250123-09:46:58.689(-8)? (STDERR)     at Iter.tryConsume (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:195:24)
W20250123-09:46:58.689(-8)? (STDERR)     at Iter.text (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:213:26)
W20250123-09:46:58.689(-8)? (STDERR)     at consume (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:285:23)
W20250123-09:46:58.690(-8)? (STDERR)     at parse (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:320:18)
W20250123-09:46:58.690(-8)? (STDERR)     at /Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:503:40
W20250123-09:46:58.690(-8)? (STDERR)     at Array.map (<anonymous>)
W20250123-09:46:58.690(-8)? (STDERR)     at pathToRegexp (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:502:23)
W20250123-09:46:58.690(-8)? (STDERR)     at Object.match (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:461:28)
W20250123-09:46:58.690(-8)? (STDERR)     at matcher (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/router/lib/layer.js:83:23)
W20250123-09:46:58.690(-8)? (STDERR)     at new Layer (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/router/lib/layer.js:90:62)
W20250123-09:46:58.690(-8)? (STDERR)     at Function.use (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/router/index.js:391:19)
W20250123-09:46:58.690(-8)? (STDERR)     at Function.<anonymous> (/Users/gischer/.meteor/packages/webapp/.2.0.4.17i3zeg.o119++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/express/lib/application.js:224:21)
W20250123-09:46:58.690(-8)? (STDERR) 
W20250123-09:46:58.690(-8)? (STDERR) Node.js v20.18.0
=> Exited with code: 1

This is on MacOs. I am running Meteor 3.0.4

Do I need to back off to Meteor 2.something?

[jankapunkt]

Thank you @gischer for the report. The current latest Meteor 3 compatible version is leonline:oauth2-server@6.0.0-rc.1 which you can pin in your .meteor/packages.

The related pull request is https://github.com/leaonline/oauth2-server/pull/21/files

The Meteor 3 compatible server code would then be

import { Meteor } from "meteor/meteor"
import { OAuth2Server } from 'meteor/leaonline:oauth2-server'

const oauth2server = new OAuth2Server({
  serverOptions: {
    addAcceptedScopesHeader: true,
    addAuthorizedScopesHeader: true,
    allowBearerTokensInQueryString: false,
    allowEmptyState: false,
    authorizationCodeLifetime: 300,
    accessTokenLifetime: 3600,
    refreshTokenLifetime: 1209600,
    allowExtendedTokenAttributes: false,
    requireClientAuthentication: true
  },
  model: {
    accessTokensCollectionName: 'oauth_access_tokens',
    refreshTokensCollectionName: 'oauth_refresh_tokens',
    clientsCollectionName: 'oauth_clients',
    authCodesCollectionName: 'oauth_auth_codes',
    debug: true
  },
  routes: {
    accessTokenUrl: '/oauth/token',
    authorizeUrl: '/oauth/authorize',
    errorUrl: '/oauth/error',
    fallbackUrl: '/oauth/*'
  }
})

// this is a "secret" route that is only accessed with
// a valid token, which has been generated 
// by the authorization_code grant flow
// You will have to implement it to allow your remote apps
// to retrieve the user credentials after successful
// authentication.
oauth2server.authenticatedRoute().get('/oauth/ident', async function (req, res, next) {
  const user = await Meteor.users.findOneAsync(req.data.user.id)

  res.status(user ? 200 : 404)
  res.set({ 'Content-Type': 'application/json' })

  const body = user
    ? user
    : { error: 'user not found', response: `request user [${userId}] not found` }

  res.json(body)

  const body = JSON.stringify({
    id: user._id,
    login: user.username,
    email: user.emails[0].address,
    firstName: user.firstName,
    lastName: user.lastName,
    name: `${user.firstName} ${user.lastName}`
  })
  res.json(body)
})

// create some fallback for all undefined routes
oauth2server.app.use('*', function (req, res, next) {
  res.status(404)
  res.end('route not found')
})
``

[jankapunkt]

@gischer is this still an issue or has been resolved=

[gischer]

Hmm I worked around this by rolling back to Meteor 2.16. If there is a new Meteor package, I can update to 3, update the package and give it a try, if you like.

[jankapunkt]

The latest release is now at 6.0.0 please give it a try

[gischer]

Ok, I created a new project based on the latest Meteor, which is 3.1.2

I created a file named /server/oauth2server.js and gave it the exact contents above. It is imported by server/main.js

I found two issues. The first is that you use "const body" twice in the above code. When I fixed that, I got the same error, having to do with pathToRegexp

A little more fooling around shows that this error goes away when I comment out the last bit creating all the fallback routes. This:

// create some fallback for all undefined routes
oauth2server.app.use('*', function (req, res, next) {
  res.status(404)
  res.end('route not found')
})

I see you are using a wildcard, which is a regExp, so that all kind of connects. Anyway, for completeness, the error I get is:

W20250321-14:02:21.349(-7)? (STDERR) packages/core-runtime.js:189
W20250321-14:02:21.359(-7)? (STDERR)             throw error;
W20250321-14:02:21.359(-7)? (STDERR)             ^
W20250321-14:02:21.359(-7)? (STDERR) 
W20250321-14:02:21.359(-7)? (STDERR) TypeError: Missing parameter name at 1: https://git.new/pathToRegexpError
W20250321-14:02:21.359(-7)? (STDERR)     at name (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:153:13)
W20250321-14:02:21.359(-7)? (STDERR)     at lexer (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:171:21)
W20250321-14:02:21.360(-7)? (STDERR)     at lexer.next (<anonymous>)
W20250321-14:02:21.360(-7)? (STDERR)     at Iter.peek (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:188:32)
W20250321-14:02:21.360(-7)? (STDERR)     at Iter.tryConsume (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:195:24)
W20250321-14:02:21.360(-7)? (STDERR)     at Iter.text (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:213:26)
W20250321-14:02:21.360(-7)? (STDERR)     at consume (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:285:23)
W20250321-14:02:21.360(-7)? (STDERR)     at parse (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:320:18)
W20250321-14:02:21.360(-7)? (STDERR)     at /Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:503:40
W20250321-14:02:21.360(-7)? (STDERR)     at Array.map (<anonymous>)
W20250321-14:02:21.361(-7)? (STDERR)     at pathToRegexp (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:502:23)
W20250321-14:02:21.361(-7)? (STDERR)     at Object.match (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/path-to-regexp/src/index.ts:461:28)
W20250321-14:02:21.361(-7)? (STDERR)     at matcher (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/router/lib/layer.js:83:23)
W20250321-14:02:21.361(-7)? (STDERR)     at new Layer (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/router/lib/layer.js:90:62)
W20250321-14:02:21.361(-7)? (STDERR)     at Function.use (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/router/index.js:391:19)
W20250321-14:02:21.361(-7)? (STDERR)     at Function.<anonymous> (/Users/gischer/.meteor/packages/webapp/.2.0.5.197mc9o5gqfl++os+web.browser+web.browser.legacy+web.cordova/npm/node_modules/express/lib/application.js:224:21)
W20250321-14:02:21.361(-7)? (STDERR) 
W20250321-14:02:21.361(-7)? (STDERR) Node.js v22.13.1