Basic code to authenticate user profiles and limit access to URLs.

Simples usage

const webhandle = require('webhandle')
const usersSetup = require('webhandle-users/integrate-with-webhandle')
let pretemplate = "app_pre"
let posttemplate = "app_post"

usersSetup({
    app: webhandle, 
    mongoDb: webhandle.dbs.myDBName.db, 
    pretemplate: pretemplate, 
    posttemplate: posttemplate,
    onLogin: (req, res, next) => {
        // This is a handle that gets run when a user successully logs in
        res.redirect('/menu')
    }
})

Authentication Service

The most basic component is the AuthService which saves and verifies users. It takes a set of options and mongo collection. Use like:

    const AuthService = require('webhandle-user/auth-service')
    const createUserIfNoneExists = require('webhandle-user/util/create-user-if-none-exists')
    
    let authService = new AuthService({
        iterations: 100,
        salt: 'this is unique to the application',
        algorithm: 'sha256',
        mongoCollection: my_mongo_collection_object
    })
    
    createUserIfNoneExists(authService, name, pass, ["group1", "group1"], callback)
    
    ....
    
    authService.login(name, pass, (err, user) => {
        // failed login will result in an error being passed
    })
    

Integration

There's also a set of code which works with to set user tokens in sessions. The easiest way to hook up all these pieces is (assuming use of webhandle):

const webhandleUserIntegrator = require('webhandle-users')
let integrator = webhandleUserIntegrator(mongo_db, {})
webhandle.routers.preStatic.use(integrator.createUserInfoLoader())
webhandle.services.authService = integrator.authService

This adds a couple methods to the req and res objects to work with users.

To create a user session:

res.createUserSession('alincoln')

To log them out:

res.removeUserSession()

To access the user information:

req.user

These sessions are not stored in memory so can be used across a cluster.

Login

There's also some basic code for handling login and logout. The file creates a router which has url handlers for /login and /logout.

app.use(require('webhandle-users/handles/create-public-handles')(integrator.authService))

Authenticating by Group

Allow access to some_router to any user who is a member of the group administrators or a member of the group editors.

let securedRouter = require('webhandle-users/utils/allow-group')(['administrators', 'editors'], some_router)
app.use(securedRouter)