server.js

import dotenv from "dotenv";
dotenv.config();
import express from "express";
const app = express();
import { auth, requiredScopes } from "express-oauth2-jwt-bearer";
import cors from "cors";

if (!process.env.ISSUER_BASE_URL || !process.env.AUDIENCE) {
  throw "Make sure you have ISSUER_BASE_URL, and AUDIENCE in your .env file";
}

const corsOptions = {
  origin: "http://localhost:3000",
};

app.use(cors(corsOptions));

const checkJwt = auth();

app.get("/api/public", function (req, res) {
  res.json({
    message:
      "Hello from a public endpoint! You don't need to be authenticated to see this.",
  });
});

app.get("/api/external", checkJwt, function (req, res) {
  res.json({
    message:
      "Hello from a private endpoint! You need to be authenticated to see this.",
  });
});

app.get(
  "/api/private-scoped",
  checkJwt,
  requiredScopes("read:messages"),
  function (req, res) {
    res.json({
      message:
        "Hello from a private endpoint! You need to be authenticated and have a scope of read:messages to see this.",
    });
  }
);

app.use(function (err, req, res, next) {
  console.error(err.stack);
  return res.set(err.headers).status(err.status).json({ message: err.message });
});

app.listen(3001);
console.log("Listening on http://localhost:3001");