token2session v3.0.1

Token to Session (token2session)

This is an Express middleware that adds a session provided by a JSON Web Token (JWT) to the request object. It can also be used as a security overlay by rejecting invalid tokens.

Installation

Usage in ESM and Typescript:

Usage in commonJs:

Options

* = look at the Notes

Notes

• If no headerKey or cookieKey is provided and useBearer aren't set to false, the middleware will use the authorization header and assume a bearer token.
• If no headerKey or cookieKey is provided and useBearer is set to false, an error will be thrown.
• The routeToOmit option accepts an array of routes that should not be rejected. A route pattern can include a * wildcard to match multiple routes.