Merge pull request #28 from screwdriver-cd/tokens

fix: Allow tokens to be passed into the URL

Author: petey

package.json

@@ -65,7 +65,7 @@
     "good-console": "^6.2.0",
     "good-squeeze": "^5.0.0",
     "hapi": "^16.0.1",
-    "hapi-auth-jwt": "^4.0.0",
+    "hapi-auth-jwt2": "^7.3.0",
     "hapi-swagger": "^7.1.0",
     "hoek": "^4.0.2",
     "inert": "^4.0.2",

plugins/auth.js

@@ -1,6 +1,6 @@
 'use strict';
 
-const jwt = require('hapi-auth-jwt');
+const jwt = require('hapi-auth-jwt2');
 const joi = require('joi');
 
 /**
@@ -28,6 +28,11 @@ exports.register = (server, options, next) => {
             verifyOptions: {
                 algorithms: ['RS256'],
                 maxAge: '12h'
+            },
+            // This function is run once the Token has been decoded with signature
+            validateFunc(decoded, request, cb) {
+                // TODO: figure out what to do here
+                cb(null, true);
             }
         });
 

test/plugins/auth.test.js

@@ -49,6 +49,6 @@ describe('auth plugin test', () => {
     });
 
     it('registers the plugin', () => {
-        assert.isOk(server.registrations['hapi-auth-jwt']);
+        assert.isOk(server.registrations['hapi-auth-jwt2']);
     });
 });