ExtJS 6: JSON Web Token API Login with Promises

Firewall.js

Ext.define('App.security.Firewall', {
    singleton: true,
    requires: [
        'App.security.TokenStorage'
    ],

    isLoggedIn: function() {
        return null !== App.security.TokenStorage.retrieve();
    },

    login: function(username, password) {
        var deferred = new Ext.Deferred();

        Ext.Ajax.request({
            url: App.server.Router.generate('authenticate'),
            method: 'POST',
            jsonData: {
                'username': username,
                'password': password
            },

            success: function (response) {
                var data = Ext.decode(response.responseText);
                if (data.token) {
                    App.security.TokenStorage.save(data.token);

                    deferred.resolve(data, response);
                } else {
                    deferred.reject(data, response);
                }
            },

            failure: function (response) {
                var data = Ext.decode(response.responseText);

                App.security.TokenStorage.clear();

                deferred.reject(data, response);
            }
        });

        return deferred.promise;
    },

    logout: function(callback) {
        App.security.TokenStorage.clear();

        // The "old" way of using callbacks. You can easily rewrite this using Promise, too, see login method.
        callback();
    }
}, function () {
    Ext.Ajax.on('beforerequest', function(conn, options) {
        if (App.security.Firewall.isLoggedIn()) {
            options.headers = options.headers || {};
            options.headers['Authorization'] = 'Bearer ' + App.security.TokenStorage.retrieve();
        }
    });
});

LoginController.js

Ext.define('App.view.login.LoginController', {
    extend: 'Ext.app.ViewController',
    alias: 'controller.login',

    onLoginClick: function() {
        var data = this.getView().down('form').getValues();

        App.security.Firewall.login(data.username, data.password).then(function() {
            this.getView().destroy();

            Ext.create({
                xtype: 'app-main'
            });
        }.bind(this), function(data) {
            Ext.Msg.alert('Error', data.message || 'An error occurred while logging in.');
        });
    }
});

TokenStorage.js

Ext.define('App.security.TokenStorage', {
    singleton: true,
    storageKey: 'json-web-token',

    clear: function () {
        localStorage.removeItem(this.storageKey);
    },

    retrieve: function() {
        return localStorage.getItem(this.storageKey);
    },

    save: function (token) {
        localStorage.setItem(this.storageKey, token);
    }
});

Hi @sseyha,

I'm sorry to reply so late, I didn't notice any comment on this gist. As @rattanchauhan mentioned, it's a pretty simple object:

Ext.define('App.server.Router', {
    singleton: true,
    endpoint: Ext.manifest.server.endpoint,

    routes: {
        'authenticate': '/authenticate'
        // generated list, static list .. your choice :)
    },

    generate: function(route, params) {
        // Whatever logic to determine the full URI.
        // For example, simple lookup:
        return this.endpoint + this.routes[route];
    }
});

Example using http://symfony.com/doc/current/bundles/FOSJsRoutingBundle/usage.html (with Symfony server side):

Ext.define('App.server.Router', {
    singleton: true,

    generate: function(route, params) {
        return Routing.generate(route, params);
    }
});

Where is the App.security.Firewall.isLoggedIn() ??

I have trouble to store and extract token using the App.security.TokenStorage with localStorage. May you help to look into using localStorage or Do I miss something from your code

Greetings havvg,
I came across this archive when searching for why my Ext JS app is not using a stored session token on Ajax requests. I'm dev'ing a front-end app using the latest SA, 4.3.3. I have a login page that uses an Ajax request to my RAD Server, which returns successfully. I then set the defaultheaders for the Session token using Ext.Ajax.defaultHeaders = {'X-Embarcadero-Session-Token' : responseData.sessionToken,}; , but on subsequent Ajax calls the token is not being sent. When viewing the dev tools in my browser I see that and I keep getting a TokenStorage.js 404 error, and I cannot figure out what is happening, which has led me to your post here.

Could I use your code to remedy this problem?