hapijs | 易学教程

How to destroy JWT Tokens on logout?

阅读更多关于 How to destroy JWT Tokens on logout?

I am using jwt plugin and strategy in hapijs. I am able to create jwt token while login user and authenticate other API using the same token through 'jwt' strategy. I am setting the token in 'request.state.USER_SESSION' as a cookie where USER_SESSION is token name. Also I am not saving these token in database. But how can I destroy jwt token at the time of logout. Please suggest a way. pedrofb The JWT is stored on browser, so remove the token deleting the cookie at client side If you need also to invalidate the token from server side before its expiration time, for example account deleted

How do Express and hapi compare to each other?

阅读更多关于 How do Express and hapi compare to each other?

From web application design and development point of view, how do Express and Hapi compare to each other? For basic examples they seem similar, however I'm interested to learn more about key differences in overall application structure. For example, as far as I have learned, Hapi uses a different routing mechanism which does not take registration order into account, can do faster lookups, but is limited comparing to Express. Are there other important differences? There is also an article about choosing Hapi (over Express) for developing the new npmjs.com website, this article states that "Hapi

nodejs hapi single page

阅读更多关于 nodejs hapi single page

问题 I have a single app site (NodeJS) and I want to migrate from Express to Hapi, what I normally do is serve static files and route everything else to a single page which contains the angularjs app and the angular routing configuration. // Express routing, first the static files app.use( express.static(__dirname + '/public') ); // Second the api routes app.get('/api', function(req, res){ res.send( {api: 'response' } ) }); // Finally everything else maps to the single page app: app.get('*',

hapi.js Cors Pre-flight not returning Access-Control-Allow-Origin header

阅读更多关于 hapi.js Cors Pre-flight not returning Access-Control-Allow-Origin header

I have an ajax file upload using (Dropzone js). which sends a file to my hapi server. I realised the browser sends a PREFLIGHT OPTIONS METHOD. but my hapi server seems not to send the right response headers so i am getting errors on chrome. here is the error i get on chrome XMLHttpRequest cannot load http://localhost:3000/uploadbookimg. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:4200' is therefore not allowed access. this is the hapi js route handler server.route({ path:

How to upload files using nodejs and HAPI?

阅读更多关于 How to upload files using nodejs and HAPI?

问题 Can anyone tell me How to upload files Using nodejs and HAPI? I am getting binary data inside the handler. Here is my html code: function sendFormFromHTML(form) { //form = $(".uploadForm").form; var formData = new FormData(form); formData.append('id', '123456'); // alternative to hidden fields var xhr = new XMLHttpRequest(); xhr.open('POST', form.action, true); xhr.onload = function(e) { alert(this.responseText) }; xhr.send(formData); return false; } <form method="post" id="uploadForm" action

hapi.js Cors Pre-flight not returning Access-Control-Allow-Origin header

阅读更多关于 hapi.js Cors Pre-flight not returning Access-Control-Allow-Origin header

问题 I have an ajax file upload using (Dropzone js). which sends a file to my hapi server. I realised the browser sends a PREFLIGHT OPTIONS METHOD. but my hapi server seems not to send the right response headers so i am getting errors on chrome. here is the error i get on chrome XMLHttpRequest cannot load http://localhost:3000/uploadbookimg. Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http:/

How to destroy JWT Tokens on logout?

阅读更多关于 How to destroy JWT Tokens on logout?

问题 I am using jwt plugin and strategy in hapijs. I am able to create jwt token while login user and authenticate other API using the same token through 'jwt' strategy. I am setting the token in request.state.USER_SESSION as a cookie where USER_SESSION is a token name. Also, I am not saving these token in the database. But how can I destroy jwt token at the time of logout? Please suggest a way. 回答1: The JWT is stored on browser, so remove the token deleting the cookie at client side If you need

Joi object validation: How to validate values with unknown key names?

阅读更多关于 Joi object validation: How to validate values with unknown key names?

问题 I have an object with key names I cannot possibly know - they are created by user. However I do know what values they (keys) are going to store, and they (values) are going to be ISO strings. How do I validate those values? And, optionally , how do I validate uknown object's keys, i.e.: key: Joi.string().min(2).max(25) What I have already tried was based on Joi API docs : Another benefits of using Joi.object([schema]) instead of a plain JS object is >that you can set any options on the object

Multipart HTTP response

阅读更多关于 Multipart HTTP response

问题 The goal is for a Node.js / hapi API server to respond to a browser's AJAX request with two things: A media file (e.g. an image) A JSON object with metadata about the file These are two separate items only because binary data cannot easily be stored in JSON. Otherwise, this would be a single resource. Nevertheless, it is preferable that they be sent in a single response. We upload these in a single request with multipart/form-data . In that case, browsers provide a built-in mechanism to