Best Practices for Implementing Auth System in Chrome Extension Connected to OpenSaaS

`​`​`typescript
// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';

// Adjusted authenticateUser function to also return user ID upon successful authentication
async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // ...
}

// ...
`​`​`

`​`​`typescript
// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';

// Adjusted authenticateUser function to also return user ID upon successful authentication
async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // ...
}

// ...
`​`​`

// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';

// Adjusted authenticateUser function to also return user ID upon successful authentication
async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // ...
}

// ...

// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';

// Adjusted authenticateUser function to also return user ID upon successful authentication
async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // ...
}

// ...

curl -v -X POST http://localhost:3001/api/generate-jwt \
     -H "Content-Type: application/json" \
     -d '{"username":"testuser","password":"verysecurepassword"}'

curl -v -X POST http://localhost:3001/api/generate-jwt \
     -H "Content-Type: application/json" \
     -d '{"username":"testuser","password":"verysecurepassword"}'

api customLogin {
  httpRoute: (POST, "/api/custom-login"),
  fn: import { customLogin } from "@src/api",
  entities: []
}

apiNamespace customApiNamespace {
  middlewareConfigFn: import { getMiddleware } from "@src/api",
  path: "/api"
}

api customLogin {
  httpRoute: (POST, "/api/custom-login"),
  fn: import { customLogin } from "@src/api",
  entities: []
}

apiNamespace customApiNamespace {
  middlewareConfigFn: import { getMiddleware } from "@src/api",
  path: "/api"
}

curl -X POST http://localhost:3001/api/custom-login -d 'username=miho' -d 'password=12345678'
{"sessionId":"5vjadgdux64jrkdsb32bvvndxic4nupfiy7tqaap"}

curl -X POST http://localhost:3001/api/custom-login -d 'username=miho' -d 'password=12345678'
{"sessionId":"5vjadgdux64jrkdsb32bvvndxic4nupfiy7tqaap"}

request.headers['Authorization'] = `Bearer ${sessionId}`

request.headers['Authorization'] = `Bearer ${sessionId}`

// main.wasp
api generateJwt {
   fn: import { generateJwt } from "@src/server/api/generateJwt.js",
   entities: [User],
   httpRoute: (POST, "/api/generate-jwt")
}

// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';

async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // Implement actual user authentication logic here
    // This should fetch the user's ID from the database based on the provided username and password
    // For demonstration, assuming authentication is successful and returning a mock user ID
    return { isAuthenticated: true, userId: 'user123' };
}

export async function generateJwt(req: Request, res: Response): Promise<void> {
    const { username, password } = req.body;
    const authResult = await authenticateUser(username, password);
    if (!authResult.isAuthenticated) {
        res.status(401).json({ error: 'Invalid credentials' });
        return;
    }

    // User payload for JWT
    const userPayload = { username, userId: authResult.userId };

    // Retrieve the secret key from environment variables
    const secretKey = process.env.JWT_SECRET_KEY;
    if (!secretKey) {
        throw new Error('JWT secret key is missing');
    }

    // Token options
    const options = { expiresIn: '1h' }; // Token expires in 1 hour
// Generate the JWT
    const token = jwt.sign(userPayload, secretKey, options);

    // Send the JWT back to the client
    res.json({ token });
}

// main.wasp
api generateJwt {
   fn: import { generateJwt } from "@src/server/api/generateJwt.js",
   entities: [User],
   httpRoute: (POST, "/api/generate-jwt")
}

// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';

async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // Implement actual user authentication logic here
    // This should fetch the user's ID from the database based on the provided username and password
    // For demonstration, assuming authentication is successful and returning a mock user ID
    return { isAuthenticated: true, userId: 'user123' };
}

export async function generateJwt(req: Request, res: Response): Promise<void> {
    const { username, password } = req.body;
    const authResult = await authenticateUser(username, password);
    if (!authResult.isAuthenticated) {
        res.status(401).json({ error: 'Invalid credentials' });
        return;
    }

    // User payload for JWT
    const userPayload = { username, userId: authResult.userId };

    // Retrieve the secret key from environment variables
    const secretKey = process.env.JWT_SECRET_KEY;
    if (!secretKey) {
        throw new Error('JWT secret key is missing');
    }

    // Token options
    const options = { expiresIn: '1h' }; // Token expires in 1 hour
// Generate the JWT
    const token = jwt.sign(userPayload, secretKey, options);

    // Send the JWT back to the client
    res.json({ token });
}

// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';
async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // Implement actual user authentication logic here
    // This should fetch the user's ID from the database based on the provided username and password
    // For demonstration, assuming authentication is successful and returning a mock user ID
    return { isAuthenticated: true, userId: 'user123' };
}

export async function generateJwt(req: Request, res: Response): Promise<void> {
    const { username, password } = req.body;
    const authResult = await authenticateUser(username, password);
    if (!authResult.isAuthenticated) {
        res.status(401).json({ error: 'Invalid credentials' });
        return;
    }

    // User payload for JWT
    const userPayload = { username, userId: authResult.userId };

    // Retrieve the secret key from environment variables
    const secretKey = process.env.JWT_SECRET_KEY;
    if (!secretKey) {
        throw new Error('JWT secret key is missing');
    }

    // Token options
    const options = { expiresIn: '1h' }; // Token expires in 1 hour

    // Generate the JWT
    const token = jwt.sign(userPayload, secretKey, options);

    // Send the JWT back to the client
    res.json({ token });
}

// generateJwt.ts
import * as jwt from 'jsonwebtoken';
import { Request, Response } from 'express';
async function authenticateUser(username: string, password: string): Promise<{ isAuthenticated: boolean; userId?: string }> {
    // Implement actual user authentication logic here
    // This should fetch the user's ID from the database based on the provided username and password
    // For demonstration, assuming authentication is successful and returning a mock user ID
    return { isAuthenticated: true, userId: 'user123' };
}

export async function generateJwt(req: Request, res: Response): Promise<void> {
    const { username, password } = req.body;
    const authResult = await authenticateUser(username, password);
    if (!authResult.isAuthenticated) {
        res.status(401).json({ error: 'Invalid credentials' });
        return;
    }

    // User payload for JWT
    const userPayload = { username, userId: authResult.userId };

    // Retrieve the secret key from environment variables
    const secretKey = process.env.JWT_SECRET_KEY;
    if (!secretKey) {
        throw new Error('JWT secret key is missing');
    }

    // Token options
    const options = { expiresIn: '1h' }; // Token expires in 1 hour

    // Generate the JWT
    const token = jwt.sign(userPayload, secretKey, options);

    // Send the JWT back to the client
    res.json({ token });
}

// src/actions.js
import { HttpError } from 'wasp/server'  
  
export const createTask = async (task, context) => {  
 if (!context.user) {  
 throw new HttpError(403)  
 }  
  
 const Task = context.entities.Task  
 return Task.create({  
 data: {  
 description: task.description,  
 user: {  
 connect: { id: context.user.id },  
 },  
 },  
 })  
}  

// src/actions.js
import { HttpError } from 'wasp/server'  
  
export const createTask = async (task, context) => {  
 if (!context.user) {  
 throw new HttpError(403)  
 }  
  
 const Task = context.entities.Task  
 return Task.create({  
 data: {  
 description: task.description,  
 user: {  
 connect: { id: context.user.id },  
 },  
 },  
 })  
}  

console.log('chrome:', chrome);
console.log('chrome.runtime:', chrome.runtime);

console.log('chrome:', chrome);
console.log('chrome.runtime:', chrome.runtime);