Question - Using angular-jwt with Restangular. about angular-jwt HOT 6 CLOSED

Hey @cerdman,

So Restangular uses $http inside as the low level HTTP request handler. Therefore, if you use angular-jwt, the JWT will be sent on every request made by Restangular as well.

If you want the JWT to just be sent on some requests but not all of them (Like the usages for your withConfig), then you'd have to send the JWT manually instead of with these project. You could use Restangular.setDefaultHeaders to send it.

Does this help?

Thanks!

from angular-jwt.

Sorry if i'm updating an old issue.
@mgonto
I have not been able to make "angular-jwt" work with the jwtInterceptor as you suggested:

$httpProvider.interceptors.push('jwtInterceptor');

Regular $http requests have the 'Authorization' header correctly setted, but this is not true for the ones made by Restangular. (Maybe Restangular reset the request headers with its own defaults)
But i've figured out that Restangular provides its own interceptor, so i was able to set the 'Authorization' header manually by using this snippet:

RestangularProvider.setFullRequestInterceptor(function(element, operation, route, url, headers, params, httpConfig) {
  var jwt = $window.localStorage.getItem('jwt');
  if(jwt && !angular.isString(headers.Authorization)) {
    headers.Authorization = 'Bearer ' + jwt;
  }
  return {
    element: element,
    params: params,
    headers: headers,
    httpConfig: httpConfig
  };
});

It's not an elegant solution, but it works.
Hope it may be helpful for someone.

from angular-jwt.

Can confirm that Restangular is not respecting the http interceptor(s) as mentioned by @simonepri - Does anyone know why? I would be happy to contribute a fix if that sounds good.

Thanks,

from angular-jwt.

@mgonto - Thank you, this was helpful. Switching over to JWT myself and using restangular.

from angular-jwt.

I can also confirm that is not working in 0.1.9 version.

from angular-jwt.

I think this could be abused to harvest Jwt tokens - if you can convince restangular to call to another domain, it will happily send the token without checking the whitelist - I think there must be a way to call the jwtInterceptor manually within this call

from angular-jwt.