Passport: No Mention of isAuthenticated() in docs

Created on 12 Jun 2018 · 6Comments · Source: jaredhanson/passport

Hi,
The method isAuthenticated() is not mentioned anywhere in the docs.Also is there any method named isUnauthenticated() too?

Source

prakhar897

👍26 ❤2 🚀1

Most helpful comment

There is no bug... The thing is that the isAuthenticated() and isUnauthenticated() functions are not mentioned anywhere in the docs. A lot of people keep requesting that this should be in the documentation since the whole point of using passport is for authenticating the user... I really don't know why this was not added yet, I could find an issue in GitHub from 2016 asking for this...

AlecBp on 28 Oct 2018

👍20

All 6 comments

Also is there any method named isUnauthenticated() too?

Yes.
https://github.com/jaredhanson/passport/blob/597e289d6fa27a2c35d16dd411de284123e3817e/lib/http/request.js#L92-L100

em92 on 13 Jun 2018

👍4

Yes this is a big omission since it's kind of the point of the library :) Here's a page documenting it: https://stackoverflow.com/questions/17756848/only-allow-passportjs-authenticated-users-to-visit-protected-page

Here's example code. Feedback on better approaches would be appreciated:

const express = require('express');
const app = express();

// must be the first defined route
app.all('*', (request, response, next) => {
  let publicRoutes = ['/register', '/login', '/logout'];
  (publicRoutes.includes(request.path) || request.isAuthenticated()) ? next() : response.sendStatus(401);
});

app.get('/myprotectedroute', (request, response) => response.send('Hello!'));
app.listen(3000);