Multi-tenanted application needs to defer the secretOrKey until after the token is retrieved about passport-jwt HOT 5 CLOSED

Do you have examples of other strategies that work this way? I was looking for examples and was unable to find any.

from passport-jwt.

Closing due due to no response from author.

from passport-jwt.

Sorry I didn't realise you were waiting on a response from me. I am not sure of other impls but this PR solved our immediate problem.

I'm not on that project any more so do what you like. :-)

Dave

Sent from my iPhone

On 25 Feb 2016, at 1:21 PM, Mike Nicholson [email protected] wrote:

Closing due due to no response from author.

—
Reply to this email directly or view it on GitHub.

from passport-jwt.

Ok, maybe I have misunderstood how JWT token is supposed to work. But lets say that I have a REST API that I want to authenticate using JWT. I would expect that every user of the API has his own secret instead of sharing the same key to all the users... how do you solve this scenario when the secretOrToken is a fixed value?

from passport-jwt.

@manast the secret in this case is something your service supplies to client services and apps, not to specific users.

from passport-jwt.