add support for async, closes #249

src/index.ts

@@ -6,7 +6,7 @@ import { UnauthorizedError } from './errors/UnauthorizedError';
 export type GetVerificationKey = (req: express.Request, token: jwt.Jwt | undefined) => Promise<jwt.Secret>;
 export type IsRevoked = (req: express.Request, token: jwt.Jwt | undefined) => Promise<boolean>;
 
-type TokenGetter = (req: express.Request) => string | undefined;
+type TokenGetter = (req: express.Request) => string | Promise<string> | undefined;
 
 type Params = {
   secret: jwt.Secret | GetVerificationKey,
@@ -48,7 +48,7 @@ export const expressjwt = (options: Params) => {
       }
 
       if (options.getToken && typeof options.getToken === 'function') {
-        token = options.getToken(req);
+        token = await options.getToken(req);
       } else if (req.headers && req.headers.authorization) {
         const parts = req.headers.authorization.split(' ');
         if (parts.length == 2) {

test/jwt.test.ts

@@ -322,6 +322,30 @@ describe('work tests', function () {
     });
   });
 
+  it('should work with an async getToken function', function (done) {
+    const req = {} as ExpressJwtRequest;
+    const res = {} as express.Response;
+    const secret = 'shhhhhh';
+    const token = jwt.sign({ foo: 'bar' }, secret);
+
+    req.headers = {};
+    req.query = {};
+    req.query.token = token;
+
+    function getTokenFromQuery(req) {
+      return Promise.resolve(req.query.token);
+    }
+
+    expressjwt({
+      secret: secret,
+      algorithms: ['HS256'],
+      getToken: getTokenFromQuery
+    })(req, res, function () {
+      assert.equal(req.auth.foo, 'bar');
+      done();
+    });
+  });
+
   it('should work with a secretCallback function that accepts header argument', function (done) {
     const req = {} as ExpressJwtRequest;
     const res = {} as express.Response;