Integrate Your Express API With FusionAuth

   
{
  "name": "fusionauth-example-typescript-client",
  "version": "1.0.0",
  "description": "Example of setting up an application with typescript.",
  "scripts": {
    "setup-angular": "node setup-angular.js",
    "setup-express": "node setup-express.js",
    "setup-flutter": "node setup-flutter.js",
    "setup-react": "node setup-react.js"
  },
  "author": "Dan Moore",
  "license": "Apache-2.0",
  "dependencies": {
    "@fusionauth/typescript-client": "^1.45.0"
  }
}

   
const {FusionAuthClient} = require('@fusionauth/typescript-client');

APPLICATION_ID = "e9fdb985-9173-4e01-9d73-ac2d60d1dc8e";
RSA_KEY_ID = "356a6624-b33c-471a-b707-48bbfcfbc593"

// You must supply your API key as an environment variable
const fusionAuthAPIKey = process.env.fusionauth_api_key;
if (! fusionAuthAPIKey ) {
  console.log("please set api key in the fusionauth_api_key environment variable")
  process.exit(1)
}

async function getTenant(client) {
  tenant = null
  try {
    clientResponse = await client.retrieveTenants()
    tenant = clientResponse.response.tenants[0]
  } catch (error) {
    console.log("couldn't find tenants " + JSON.stringify(error))
    process.exit(1)
  }
  return tenant
}

async function patchTenant(client, tenant) {
  try {
    clientResponse = await client.patchTenant(tenant["id"], {"tenant": {"issuer":"http://localhost:9011"}})
  } catch (error) {
    console.log("couldn't update tenant " + JSON.stringify(error))
    process.exit(1)
  }
}

async function generateKey(client) {
  try {
    clientResponse = await client.generateKey(RSA_KEY_ID, {"key": {"algorithm":"RS256", "name":"For JSExampleApp", "length": 2048}})
  } catch (error) {
    console.log("couldn't create RSA key " + JSON.stringify(error))
    process.exit(1)
  }
}

async function createApplication(client) {

  application = {}
  application["name"] = "JSExampleApp"

  application["oauthConfiguration"] = {}
  application["oauthConfiguration"]["authorizedRedirectURLs"] = ["http://localhost:3000"]

  application["oauthConfiguration"]["requireRegistration"] = true
  application["oauthConfiguration"]["enabledGrants"] = ["authorization_code", "refresh_token"]
  application["oauthConfiguration"]["logoutURL"] = "http://localhost:3000/logout"
  application["oauthConfiguration"]["clientSecret"] = "change-this-in-production-to-be-a-real-secret"

  // assign key from above to sign our tokens. This needs to be asymmetric
  application["jwtConfiguration"] = {}
  application["jwtConfiguration"]["enabled"] = true
  application["jwtConfiguration"]["accessTokenKeyId"] = RSA_KEY_ID
  application["jwtConfiguration"]["idTokenKeyId"] = RSA_KEY_ID

  try {
    clientResponse = await client.createApplication(APPLICATION_ID, {"application": application})
  } catch (error) {
    console.log("couldn't create application " + JSON.stringify(error))
    process.exit(1)
  }
}

async function getUser(client) {
  user = null
  try {
    // should only be one user
    clientResponse = await client.searchUsersByQuery({"search": {"queryString":"*"}})
    user = clientResponse.response.users[0]
  } catch (error) {
    console.log("couldn't find user " + JSON.stringify(error))
    process.exit(1)
  }
  return user
}

// patch the user to make sure they have a full name, otherwise OIDC has issues
// TODO test check for errorResponse
async function patchUser(client, user) {
  try {
    clientResponse = await client.patchUser(user["id"], {"user": {"fullName": user["firstName"]+" "+user["lastName"]}})
  } catch (error) {
    console.log("couldn't patch user " + JSON.stringify(error))
    process.exit(1)
  }
}

async function registerUser(client, user) {
  try {
    clientResponse = await client.register(user["id"], {"registration":{"applicationId":APPLICATION_ID}})
  } catch (error) {
    console.log("couldn't register user " + JSON.stringify(error))
    process.exit(1)
  }
}

async function main(client) {
  tenant = await getTenant(client)
  await patchTenant(client, tenant)
  await generateKey(client)
  await createApplication(client)
  user = await getUser(client)
  await patchUser(client, user)
  await registerUser(client, user)
  console.log(user)
}

const client = new FusionAuthClient(fusionAuthAPIKey, 'http://localhost:9011');

main(client)

   
#!/usr/bin/env node

/**
 * Module dependencies.
 */

var app = require('../app');
var debug = require('debug')('setup-express:server');
var http = require('http');

/**
 * Get port from environment and store in Express.
 */

var port = normalizePort(process.env.PORT || '3000');
app.set('port', port);

/**
 * Create HTTP server.
 */

var server = http.createServer(app);

/**
 * Listen on provided port, on all network interfaces.
 */

server.listen(port);
server.on('error', onError);
server.on('listening', onListening);

/**
 * Normalize a port into a number, string, or false.
 */

function normalizePort(val) {
  var port = parseInt(val, 10);

  if (isNaN(port)) {
    // named pipe
    return val;
  }

  if (port >= 0) {
    // port number
    return port;
  }

  return false;
}

/**
 * Event listener for HTTP server "error" event.
 */

function onError(error) {
  if (error.syscall !== 'listen') {
    throw error;
  }

  var bind = typeof port === 'string'
    ? 'Pipe ' + port
    : 'Port ' + port;

  // handle specific listen errors with friendly messages
  switch (error.code) {
    case 'EACCES':
      console.error(bind + ' requires elevated privileges');
      process.exit(1);
      break;
    case 'EADDRINUSE':
      console.error(bind + ' is already in use');
      process.exit(1);
      break;
    default:
      throw error;
  }
}

/**
 * Event listener for HTTP server "listening" event.
 */

function onListening() {
  var addr = server.address();
  var bind = typeof addr === 'string'
    ? 'pipe ' + addr
    : 'port ' + addr.port;
  debug('Listening on ' + bind);
}

   
var express = require('express');
var router = express.Router();

/* GET home page. */
router.get('/messages', function(req, res, next) {
  res.send({messages: ['Hello']});
});

module.exports = router;

   
const jose = require('jose')

const jwksClient = jose.createRemoteJWKSet(new URL('http://localhost:9011/.well-known/jwks.json'));

const authentication = async (req, res, next) => {
    const access_token = req.cookies['app.at'];

    if (!access_token) {
        res.status(401);
        res.send({error: 'Missing token cookie and Authorization header'});
    } else {
        try {
            await jose.jwtVerify(access_token, jwksClient, {
                issuer: 'http://localhost:9011',
                audience: 'e9fdb985-9173-4e01-9d73-ac2d60d1dc8e',
            });
            next();
        } catch (e) {
            if (e instanceof jose.errors.JOSEError) {
                res.status(401);
                res.send({error: e.message, code: e.code});
            } else {
                res.status(500);
                res.send({error: JSON.stringify(e)});
            }
        }
    }
}

module.exports = authentication;

   
require('dotenv').config(); // this loads env vars

var express = require('express');
var cookieParser = require('cookie-parser');
var logger = require('morgan');
var cors = require('cors');

var indexRouter = require('./routes/index');
const authentication = require('./middlewares/authentication');

var app = express();

app.use(logger('dev'));
app.use(express.json());
app.use(express.urlencoded({ extended: false }));
app.use(cookieParser());

app.use(authentication);

app.use('/', indexRouter);

module.exports = app;