Added option for key to use for decoded data

README.md

@@ -1,7 +1,7 @@
 # koa-jwt
 
 Koa middleware that validates JSON Web Tokens and sets `ctx.user`
-if a valid token is provided.
+(by default) if a valid token is provided.
 
 This module lets you authenticate HTTP requests using JSON Web Tokens 
 in your [Koa](http://koajs.com/) (node.js) applications.
@@ -16,9 +16,9 @@ for a good introduction.
 ## Usage
 
 The JWT authentication middleware authenticates callers using a JWT
-token.  If the token is valid, `ctx.user` will be set with the JSON 
-object decoded to be used by later middleware for authorization and 
-access control. 
+token.  If the token is valid, `ctx.user` (by default) will be set 
+with the JSON object decoded to be used by later middleware for 
+authorization and access control. 
 
 ## Example
 
@@ -64,6 +64,7 @@ app.use(function *(){
 app.listen(3000);
 ```
 
+
 Alternatively, you can add the `passthrough` option to always yield next,
 even if no valid Authorization header was found: 
 ```js
@@ -72,6 +73,12 @@ app.use(jwt({ secret: 'shared-secret', passthrough: true }));
 This lets downstream middleware make decisions based on whether `ctx.user` is set.
 
 
+If you prefer to use another ctx key for the decoded data, just pass in `key`, like so:
+```js
+app.use(jwt({ secret: 'shared-secret', key: 'jwtdata' }));
+```
+This makes the decoded data available as `ctx.jwtdata`.
+
 You can specify audience and/or issuer as well:
 ```js
 app.use(jwt({ secret:   'shared-secret',
@@ -80,6 +87,7 @@ app.use(jwt({ secret:   'shared-secret',
 ```
 If the JWT has an expiration (`exp`), it will be checked.
 
+
 This module also support tokens signed with public/private key pairs. Instead 
 of a secret, you can specify a Buffer with the public key:
 ```js

index.js

@@ -7,6 +7,7 @@ JWT.verify = thunkify(JWT.verify);
 
 module.exports = function(opts) {
   opts = opts || {};
+  opts.key = opts.key || 'user';
 
   assert(opts.secret, '"secret" option is required');
 
@@ -40,7 +41,7 @@ module.exports = function(opts) {
     }
 
     if (user || opts.passthrough) {
-      this.user = user;
+      this[opts.key] = user;
       yield next;
     } else {
       this.throw(401, msg);

package.json

@@ -1,7 +1,7 @@
 {
   "name": "koa-jwt",
-  "version": "0.0.1",
-  "description": "JWT authentication middleware.",
+  "version": "0.0.2",
+  "description": "Koa JWT authentication middleware.",
   "keywords": [
     "auth",
     "authn",
@@ -10,6 +10,8 @@
     "authorization",
     "http",
     "jwt",
+    "json",
+    "middleware",
     "token",
     "oauth",
     "koa"

test.js

@@ -159,4 +159,28 @@ describe('success tests', function () {
 
   });
 
+  it('should use provided key for decoded data', function(done) {
+    var validUserResponse = function(res) {
+      if (!(res.body.foo === 'bar')) return "Key param not used properly";
+    }
+
+    var secret = 'shhhhhh';
+    var token = jwt.sign({foo: 'bar'}, secret);
+
+    var app = koa();
+
+    app.use(koajwt({ secret: secret, key: 'jwtdata' }));
+    app.use(function* (next) {
+      this.body = this.jwtdata;
+    });
+
+    request(app.listen())
+      .get('/')
+      .set('Authorization', 'Bearer ' + token)
+      .expect(200)
+      .expect(validUserResponse)
+      .end(done);
+
+  });
+
 });