Support for BasePath

Author: Yann-J

app.js

@@ -20,8 +20,7 @@ var strategy = new Auth0Strategy(
     domain: process.env.AUTH0_DOMAIN,
     clientID: process.env.AUTH0_CLIENT_ID,
     clientSecret: process.env.AUTH0_CLIENT_SECRET,
-    callbackURL:
-      process.env.AUTH0_CALLBACK_URL || 'http://localhost:3000/callback'
+    callbackURL:  process.env.AUTH0_CALLBACK_URL || `http://localhost:3000${process.env.URL_CONTEXT || ''}/callback`
   },
   function (accessToken, refreshToken, extraParams, profile, done) {
     // accessToken is the token to call Auth0 API (not needed in the most cases)
@@ -53,7 +52,7 @@ app.use(cookieParser());
 
 // config express-session
 var sess = {
-  secret: 'CHANGE THIS SECRET',
+  secret: process.env.SESSION_SECRET || 'CHANGE THIS SECRET',
   cookie: {},
   resave: false,
   saveUninitialized: true
@@ -118,4 +117,12 @@ app.use(function (err, req, res, next) {
   });
 });
 
-module.exports = app;
+app.locals.basePath = process.env.URL_CONTEXT || '';
+let export_app = app;
+
+if(app.locals.basePath) {
+  //mount on subpath
+  export_app = express().use(app.locals.basePath, app);
+}
+
+module.exports = export_app;

routes/auth.js

@@ -3,10 +3,19 @@ var router = express.Router();
 var passport = require('passport');
 
 // Perform the login, after login Auth0 will redirect to callback
-router.get('/login', passport.authenticate('auth0', {
-  scope: 'openid email profile'
-}), function (req, res) {
-  res.redirect('/');
+router.get('/login', 
+  (req,res,next) => {
+    // Save the referrer URL to redirect back after authentication...
+    if(!req.session.returnTo && req.headers.referer && req.headers.referer != req.originalUrl) {
+      req.session.returnTo = req.headers.referer;
+    }
+    next();
+  },
+  passport.authenticate('auth0', {
+    scope: 'openid email profile'
+  }),
+  function (req, res) {
+    res.redirect('/');
 });
 
 // Perform the final stage of authentication and redirect to previously requested URL or '/user'

routes/users.js

@@ -6,7 +6,7 @@ var router = express.Router();
 router.get('/user', secured(), function (req, res, next) {
   const { _raw, _json, ...userProfile } = req.user;
   res.render('user', {
-    userProfile: JSON.stringify(req.user, null, 2),
+    userProfile: JSON.stringify(userProfile, null, 2),
     title: 'Profile page'
   });
 });

views/index.pug

@@ -5,4 +5,4 @@ block content
     if locals.user
       h4 You are logged in!
     else
-      h4 You are not logged in! Please #[a(href="/login") Log In] to continue.
+      h4 You are not logged in! Please #[a(href=basePath+"/login") Log In] to continue.

views/layout.pug

@@ -2,17 +2,17 @@ doctype html
 html
   head
     title= title
-    link(rel='stylesheet', href='/stylesheets/style.css')
+    link(rel='stylesheet', href=basePath+'/stylesheets/style.css')
     link(rel='stylesheet', href='https://www.w3schools.com/w3css/4/w3.css')
     link(rel='shortcut icon', href='//cdn2.auth0.com/styleguide/latest/lib/logos/img/favicon.png')
 
   body
     nav.w3-bar.w3-border.w3-light-grey( role="navigation" )
       .w3-bar-item.w3-text-grey Auth0 - NodeJS
-      a(href="/").w3-bar-item.w3-button Home
+      a(href=basePath+"/").w3-bar-item.w3-button Home
       if locals.user
-        a(href="/user" ).w3-bar-item.w3-button Profile
-        a(id="qsLogoutBtn" href="/logout").w3-bar-item.w3-button Log Out
+        a(href=basePath+"/user" ).w3-bar-item.w3-button Profile
+        a(id="qsLogoutBtn" href=basePath+"/logout").w3-bar-item.w3-button Log Out
       else
-        a(id="qsLoginBtn" href="/login").w3-bar-item.w3-button Log In
+        a(id="qsLoginBtn" href=basePath+"/login").w3-bar-item.w3-button Log In
     block content