Red.JwtSessions 1.1.1

Jwt Sessions for RedHttpServer

Simple session management middleware for Red using JWT.Net

Usage

After installing and referencing this library, the Red.Response has the extension method SendJwtToken(sessionData).

'SendJwtToken(sessionData)' creates a new Jwt token using the provided session-data and sends it JSON encoded: '{ "JWT": "Bearer eyJ0eXAiOiJKV1QiL..." }'

Example

class MySession 
{
    public string Username;
}
...
server.Use(new JwtSessions<MySession>(new JwtSessionSettings(TimeSpan.FromDays(1), "my secret secret")
{
    ShouldAuthenticate = path => path != "/login" // We allow people to send requests without a valid Authorization to /login, where we can authenticate them
}));

server.Get("/login", async (req, res) =>
{
    var form = await res.GetFormDataAsync();
    if (ValidForm(form) && Authenticate(form["username"], form["password"]))
    {
        await res.SendJwtToken(new MySession {Username = "benny"});
    }
    else 
        await res.SendStatus(HttpStatusCode.BadRequest);
});

// Only authenticated users are allowed to /friends
server.Get("/friends", async (req, res) => 
{
    var session = req.GetData<MySession>();
    var friends = database.GetFriendsOfUser(session.Username);
    await res.SendJson(friends);
});