passport-bitbucket-token

passport-bitbucket-token

Passport strategy for authenticating with Bitbucket access tokens using the OAuth 2.0 API.

Library is inspired by passport-facebook-token.

Installation

npm install passport-bitbucket-token

Usage

Configure Strategy

The Bitbucket authentication strategy authenticate users using Bitbucket account and OAuthe 2 tokens. The strategy requires two parameters: options and verify callback. options are used to configure strategy. verify callback is function that accepts 4 arguments: accessToken, refreshToken, profile, done. profile is parsed Bitbucket profile. done is method which is called with user when verify method is finished.

var BitbucketTokenStrategy = require('passport-bitbucket-token');

passport.use(new BitbucketTokenStrategy({
      clientID: 'app-id',
      clientSecret: 'client-secret'
    },
    function (accessToken, refreshToken, profile, done) {
      User.upsertUser(accessToken, refreshToken, profile, function(err, user) {
        return done(err, user);
      });
    }));

Options

• apiVersion - Which version of Bitbucket API user want to use. Allowed values are 1.0 or 2.0.
• accessTokenField - Name of HTTP header, body field or query parameter where access token is stored in request
• refreshTokenField - Name of HTTP header, body field or query parameter where refresh token is stored in request
• passReqToCallback - Should verify function received as first parameter req object

Authenticate User

router.route('/auth/bitbucket')
  .post(passport.authenticate('bitbucket-token'), function(req, res, next) {
    if (!req.user) {
      return res.send(401, 'User Not Authenticated');
    }

    res.send(200);
  });

Client Requests

Sending access_token as a Query parameter

GET /auth/bitbucket?access_token=<TOKEN>

Sending access token as an HTTP header

GET /auth/bitbucket HTTP/1.1
Host: example.com
Authorization: Bearer base64_access_token_string

Sending access token as an HTTP body

POST /auth/bitbucket HTTP/1.1
Host: example.com

access_token=base64_access_token_string

License

passport-bitbucket-token is released under MIT License.