Need help with setting bearer token in the header.

[faizol]

Hi,

I'm trying to set jwt token but I'm not sure if the method below is the right way to get the token from the header.

I'm setting the token like this;

        req->create_response()
            .append_header_date_field()
            .append_header(restinio::http_field::authorization,"Bearer "+newtoken)
            ..... 

and trying to read it like this;

    using namespace restinio::http_field_parsers::bearer_auth;
    const auto auth_params = try_extract_params(*req, restinio::http_field::authorization);
    if(auth_params) {
        const std::string & token = auth_params->token;
        std::cout << "token : " << token << std::endl;
    }

Is that the right way to get the token?

Thanks.

[eao197]

Hi! Yes, it looks like the right way.

[faizol]

Hi,

Thanks for the reply. I can't seems to get to extract the Bearer token coz auth_params.has_value() always returns false. The auth Bearer was set and has value when I checked it using http Header Live addon on Firefox.

Any pointers on how should I proceed to get the Bearer token?

Thank you very much.

[eao197]

I don't use bearer auth by myself, tools for working with this type of auth were contributed by @prince-chrismc , maybe he can help here.

Anyway, try_parse_params returns expected<params_t, extraction_error_t>. If you can't get the params_t then you can examine extraction_error_t instance. Maybe it provides some useful information.

[faizol]

Thank you very much. I think I have found my problem. The token should be refreshed when navigating from one page to another as the token is not persistent, right? So if the previous page doesn't set the token in the header, then it won't be read by the next page. But I will contact @prince-chrismc to confirm what I mentioned above is the problem.

Another question. What's the best way to redirect a page to another page from within restinio? What I do now is to embed javascript in a body response.

Thank you again for your time, cheers.

[faizol]

I'll close this for now, thank you again.

[eao197]

What's the best way to redirect a page to another page from within restinio?

What do you mean under "redirect a page"? The use of HTTP Status Code 30x, like 301 "Moved Permanently"?

[prince-chrismc]

Some note how I implemented the client workflow,

• a GET endpoint which sends the user to the "form submission"

  • returns 301 to the auth service (fills in callback uri)
  • backend gets a token on the users behalf

• All other endpoints use the code in https://github.com/Stiffstream/restinio/issues/152#issue-991363698

  • I use https://github.com/Thalhammer/jwt-cpp for working with JWT (shameless plug)
  • Plus I have special application logic

[prince-chrismc]

The token should be refreshed when navigating from one page to another as the token is not persistent, right? So if the previous page doesn't set the token in the header, then it won't be read by the next page

According to best practices, you should save the JWT securely in the application... which has a short expiration and you only need to refresh at the half life =)