siimee/backend/lib/auth/strategies/jwt.js

'use strict'

module.exports = options => {
    return {
        keys: {
            key: options.jwtKey,
            algorithms: ['HS256'],
        },
        verify: {
            aud: 'urn:audience:test',
            iss: 'urn:issuer:test',
            sub: false,
        },
        validate: (artifacts, request, h) => {
            try {
                // Check if the Access Token is Valid
                // if (!accessTokenIsValid) {
                // Look up if the Session is Active
                // } else {
                // isValid: true
                // }
                return {
                    isValid: true,
                    credentials: { user: artifacts.decoded.payload.user },
                }
            } catch (err) {
                console.error(err)
                return {
                    isValid: false,
                }
            }
        },
    }
}