{"_id":"@brianspowers/passport-remember-me","name":"@brianspowers/passport-remember-me","dist-tags":{"latest":"0.0.1"},"versions":{"0.0.1":{"name":"@brianspowers/passport-remember-me","version":"0.0.1","description":"Remember Me cookie authentication strategy for Passport.","keywords":["passport","cookie","persistent","rememberme","auth","authn","authentication"],"repository":{"type":"git","url":"git://github.com/jaredhanson/passport-remember-me.git"},"bugs":{"url":"http://github.com/jaredhanson/passport-remember-me/issues"},"author":{"name":"Jared Hanson","email":"jaredhanson@gmail.com","url":"http://www.jaredhanson.net/"},"licenses":[{"type":"MIT","url":"http://www.opensource.org/licenses/MIT"}],"main":"./lib","dependencies":{"pkginfo":"0.2.x","passport-strategy":"1.x.x"},"devDependencies":{"mocha":"1.x.x","chai":"1.x.x"},"scripts":{"test":"NODE_PATH=./lib node_modules/.bin/mocha --reporter spec --require test/bootstrap/node test/*.test.js"},"engines":{"node":">= 0.4.0"},"_id":"@brianspowers/passport-remember-me@0.0.1","gitHead":"4c60fdee54cbb5c53faec48df1ccf05b07cb9fe6","homepage":"https://github.com/jaredhanson/passport-remember-me#readme","_nodeVersion":"20.11.1","_npmVersion":"10.2.4","dist":{"integrity":"sha512-3lafKAIkw4hxDZ5aZD37rp+HFGSZmdczkTm67bzlRHN1DSjIlIERRXiX7Se8xhLrOlgrjnOpPyY7DJ4dhWNtIg==","shasum":"a51e26a836bbc406db0c6cf5eb04f22eefdccb7f","tarball":"https://registry.npmjs.org/@brianspowers/passport-remember-me/-/passport-remember-me-0.0.1.tgz","fileCount":7,"unpackedSize":11011,"signatures":[{"keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA","sig":"MEUCIDTZcRnI+AvGcKOLI6Iqr6DO213peOlOqY0Wq5vB2ofAAiEA34gi8mSSmnsTf6Er0sBHVUNSxJjW42CvkDkBHzd39oM="}]},"_npmUser":{"name":"brianspowers","email":"brian@brianpowers.net"},"directories":{},"maintainers":[{"name":"brianspowers","email":"brian@brianpowers.net"}],"_npmOperationalInternal":{"host":"s3://npm-registry-packages","tmp":"tmp/passport-remember-me_0.0.1_1710544135544_0.8046943035432113"},"_hasShrinkwrap":false}},"time":{"created":"2024-03-15T23:08:55.412Z","0.0.1":"2024-03-15T23:08:55.703Z","modified":"2024-03-15T23:08:56.271Z"},"maintainers":[{"name":"brianspowers","email":"brian@brianpowers.net"}],"description":"Remember Me cookie authentication strategy for Passport.","homepage":"https://github.com/jaredhanson/passport-remember-me#readme","keywords":["passport","cookie","persistent","rememberme","auth","authn","authentication"],"repository":{"type":"git","url":"git://github.com/jaredhanson/passport-remember-me.git"},"author":{"name":"Jared Hanson","email":"jaredhanson@gmail.com","url":"http://www.jaredhanson.net/"},"bugs":{"url":"http://github.com/jaredhanson/passport-remember-me/issues"},"readme":"# Passport-Remember Me\n\n[Passport](http://passportjs.org/) strategy for authenticating based on a\nremember me cookie.\n\nThis module lets you authenticate using a remember me cookie (aka persistent\nlogin) in your Node.js applications.  By plugging into Passport, remember me\nauthentication can be easily and unobtrusively integrated into any application\nor framework that supports [Connect](http://www.senchalabs.org/connect/)-style\nmiddleware, including [Express](http://expressjs.com/).\n\n## Install\n\n    $ npm install passport-remember-me\n\n## Usage\n\n#### Configure Strategy\n\nThe remember me authentication strategy authenticates users using a token stored\nin a remember me cookie.  The strategy requires a `verify` callback, which\nconsumes the token and calls `done` providing a user.\n\nThe strategy also requires an `issue` callback, which issues a new token.  For\nsecurity reasons, remember me tokens should be invalidated after being used.\nThe `issue` callback supplies a new token that will be stored in the cookie for\nnext use.\n\n    passport.use(new RememberMeStrategy(\n      function(token, done) {\n        Token.consume(token, function (err, user) {\n          if (err) { return done(err); }\n          if (!user) { return done(null, false); }\n          return done(null, user);\n        });\n      },\n      function(user, done) {\n        var token = utils.generateToken(64);\n        Token.save(token, { userId: user.id }, function(err) {\n          if (err) { return done(err); }\n          return done(null, token);\n        });\n      }\n    ));\n\n#### Authenticate Requests\n\nUse `passport.authenticate()`, specifying the `'remember-me'` strategy, to\nauthenticate requests.\n\nThis is typically used in an application's middleware stack, to log the user\nback in the next time they visit any page on your site.  For example:\n\n    app.configure(function() {\n      app.use(express.cookieParser());\n      app.use(express.bodyParser());\n      app.use(express.session({ secret: 'keyboard cat' }));\n      app.use(passport.initialize());\n      app.use(passport.session());\n      app.use(passport.authenticate('remember-me'));\n      app.use(app.router);\n    });\n    \nNote that `passport.session()` should be mounted *above* `remember-me`\nauthentication, so that tokens aren't exchanged for currently active login\nsessions.\n\n#### Setting the Remember Me Cookie\n\nIf the user enables \"remember me\" mode, an initial cookie should be set when\nthey login.\n\n    app.post('/login', \n      passport.authenticate('local', { failureRedirect: '/login', failureFlash: true }),\n      function(req, res, next) {\n        // issue a remember me cookie if the option was checked\n        if (!req.body.remember_me) { return next(); }\n    \n        var token = utils.generateToken(64);\n        Token.save(token, { userId: req.user.id }, function(err) {\n          if (err) { return done(err); }\n          res.cookie('remember_me', token, { path: '/', httpOnly: true, maxAge: 604800000 }); // 7 days\n          return next();\n        });\n      },\n      function(req, res) {\n        res.redirect('/');\n      });\n\n#### Security Considerations\n\nIf not managed correctly, using a \"remember me\" cookie for automatic\nauthentication increases a service's exposure to potential security threats.\nThere are a number of techniques to reduce and mitigate these threats, and it\nis a matter of application-level policy to asses the level of risk and implement\nappropriate counter measures.\n\nThe following list is recommended reading for understanding these risks:\n\n- [The definitive guide to forms based website authentication](http://stackoverflow.com/questions/549/the-definitive-guide-to-forms-based-website-authentication)\n- [Persistent Login Cookie Best Practice](http://fishbowl.pastiche.org/2004/01/19/persistent_login_cookie_best_practice/)\n- [Improved Persistent Login Cookie Best Practice](http://jaspan.com/improved_persistent_login_cookie_best_practice) [(archive)](http://web.archive.org/web/20130214051957/http://jaspan.com/improved_persistent_login_cookie_best_practice)\n\n## Examples\n\nFor a complete, working example, refer to the [login example](https://github.com/jaredhanson/passport-remember-me/tree/master/examples/login).\n\n## Tests\n\n    $ npm install\n    $ make test\n\n[![Build Status](https://secure.travis-ci.org/jaredhanson/passport-remember-me.png)](http://travis-ci.org/jaredhanson/passport-remember-me)\n\n## Credits\n\n  - [Jared Hanson](http://github.com/jaredhanson)\n\n## License\n\n[The MIT License](http://opensource.org/licenses/MIT)\n\nCopyright (c) 2013 Jared Hanson <[http://jaredhanson.net/](http://jaredhanson.net/)>\n","readmeFilename":"README.md"}