How to chain multiple jwt auth strategies

This isn’t an issue per se, but I’m struggling like mad to find a solution. I have two types of clients that each have their own signing key. I need to try two jwt strategies in a row; if either of them match, the client should be authenticated.

However, this is not how Hapi’s auth system works. If the first strategy fails to decode the token, it stops the chain and the second strategy is never called. I looked at #120 and #130 as they seemed similar, but I wasn’t able to find a way to use verifyFunc to achieve the desired behavior.

Basically, I need the first strategy to act like “try” and the second act like “required” but I can’t figure out how to achieve this. Any ideas would be most appreciated! Sorry if this isn’t exactly the right forum for the question, but seems someone must have encountered this use case before…

[jschr]

@Jiropole Started looking for similar solution today so you’ve already helped at least one person. Thanks 👍

[Jiropole]

Sorry, this version’s easier on the eyes:

    server.auth.strategy('token', 'jwt', 'required', {
        verifyFunc: function (decoded, request, callback) {
            const key = keysByAudience[decoded.aud];
            if (!key) {
                return callback(null, false);
            }

            JWT.verify(request.auth.token, key, { algorithms: ['HS256'] }, (err, decoded) => {
                if (err || !decoded) {
                    return callback(err, false);
                }
                return callback(null, true, decoded);
            });
        }
    });