authorization

A really simple Node.js authorization library.

Usage

var express = require('express');
var authorization = require('@ryanburnette/authorization');

var app = express();

app.use(
  '/api/widgets',
  authorization({ methods: ['GET', 'POST'], roles: ['user', 'admin'] }),
  authorization({ methods: ['DELETE'], roles: ['admin'] }),
  function (req, res) {
    res.sendStatus(200);
  }
);

app.get(
  '/api/employees',
  authorization({ roles: ['user', 'admin'] }),
  function (req, res) {
    res.sendStatus(200);
  }
);

app.post(
  '/api/employees/create',
  authorization({ roles: ['admin'] }),
  function (req, res) {
    res.sendStatus(200);
  }
);

app.listen(3000);