The default routing hook allows you to define, overwrite, and add additional policies at any path, subpath, or individual route.
/app/routes.js
module.exports = function(mycro) {
return {
'/api': {
// define the policy chain for a particular path and all of it's subpaths and routes
policies: [
// all routes at /api/* will execute the `authenticated` policy, defined
// at /app/policies/authenticated.js
'authenticated'
],
'/admin': {
// define additional policies for routes at /api/admin/*. These policies will be
// added to the current policy chain (after `authenticated` in this case)
additionalPolicies: [
mycro.policies.or(
'isSuperAdmin', // normal policies can be called via their file name
mycro.policies['member-of']('admins') // policy factory functions can be executed inline
)
],
routes: 'admin'
},
'/blog': {
// we can overwrite, clear, or redefine the current policies for a path, subpath, or
// route by providing a `policies` attribute with a new definition
policies: [],
'/comments': {
options: {
model: 'blog/comments'
},
routes: 'crud'
},
'/posts': {
options: {
model: 'blog/posts'
},
routes: 'crud'
}
}
}
};
};/app/routes/crud.js
module.exports = {
get: 'crud.find'
post: {
policies: [
'authenticated'
],
handler: 'crud.create'
},
'/:id': {
del: {
policies: [
'authenticated',
mycro.policies.or(
'isSuperAdmin',
'owner'
)
],
handler: 'crud.destroy'
},
get: 'crud.findOne',
put: {
policies: [
'authenticated',
'owner'
],
handler: 'crud.update'
}
}
};In addition to policies, the api allows you to specify regex routes and version routes using resitfy's versioning capabilities. See the restify docs for more info.
/app/routes.js
module.exports = function(mycro) {
return {
// unversioned routes will use the default version specified in the server config
// or 1.0.0 if no default is specified
'/hello/(\\w+)': { // note the double \
regex: true,
get: 'greet.sayHello' //
},
'v2.0.0': {
'/hello/(\\w+)': {
regex: true,
policies: [
'geo'
]
get: 'greet.localizedGreeting'
}
}
}
};