Express Authorize Route

Helper for authorize access to Express routers with token.

Install

$ npm install express-auth-route --save

Example

const AuthRoute = require('express-auth-route');
const auth = new AuthRoute();

auth.generateToken(async(params)=>{
    ... your logic here
    return token;
});

auth.checkAccessToken(async (req, token, params)=>{
    ... your logic here
    // if you need in your next middlewares or endpoints
    req.access_token = token;
    // if you have fetched user by the token you can pass in the next
    req.user = user;

    return; // pass the check

    // or throw AuthRoute.PredefinedError('access_denied');
});

// Add at least one authenticator
// when request come grant_type must be equals to your authenticator
// you can create your custom authenticator, the only required implemented method is 'authenticate(req, done)'
auth.addAuthenticator('password', new AuthRoute.PasswordAuthenticator(async (username, password)=>{
    ... your logic here
    if (username == 'admin' && password == '1234') return {username:'admin'};
    else throw AuthRoute.PredefinedError('invalid_grant');
}));

// Authorizers are optional
auth.addAuthorizer('admin', async (req, ...parameters)=>{
    ... your logic here
    if (isAdmin(req.user)) next();
    else throw AuthRoute.PredefinedError('Access Denied!');	// Error will be handled by AuthRoute
});


// now defined the express routes

// GET /token return the access_token if authenticate success
router.get('/token', auth.authenticate());

// GET /secure render the secure-page only if we are authorized
router.get('/secure', auth.authorize(), function(req, res){
    res.render('secure-page');
});
// GET /secure/admin render the secure-page only if we are authorized and we pass the admin authorizer
router.get('/secure/admin', auth.authorize('admin', ...parameters), function(req, res){
    res.render('secure-page');
});

How work

Coming soon.

Credits

• Sergio Donati

License

MIT

Copyright (c) 2016 Sergio Donati