Add support for HTTP method.

lib/policy-manager.js

@@ -22,18 +22,18 @@ function PolicyManager(policies, defaultStrategies) {
 }
 
 _.extend(PolicyManager.prototype, {
-  policiesFor: function (path) {
+  policiesFor: function (path, method) {
     let policies = [];
     for (let policy of this._policies) {
-      if (policy.appliesTo(path)) {
+      if (policy.appliesTo(path, method)) {
         policies.push(policy);
       }
     }
     return policies;
   },
 
   applyPolicies: function *(context) {
-    let policies = this.policiesFor(context.path);
+    let policies = this.policiesFor(context.path, context.method);
     let entities = {};
     for (let policy of policies) {
       if (entities[policy.scope]) {

lib/policy.js

@@ -11,6 +11,8 @@ function Policy(policy) {
 
 _.extend(Policy.prototype, {
   _assertValid: function () {
+    assert(_.isUndefined(this.methods) || _.isArray(this.methods),
+      'policy methods must be an array');
     assert(_.isString(this.path) || _.isRegExp(this.path),
      'policy path must be a string or a regex');
     assert(_.isUndefined(this.scope) || _.isString(this.scope),
@@ -28,7 +30,10 @@ _.extend(Policy.prototype, {
     return 'Path: ' + this.path + ', scope: ' + this.scope + ', enforce: ' + this.enforce;
   },
 
-  appliesTo: function (path) {
+  appliesTo: function (path, method) {
+    if (this.methods && this.methods.indexOf(method.toUpperCase()) == -1) {
+      return false;
+    }
     let m = path.match(this.path);
     return !!m && m.index === 0 && m[0] === path;
   },

package.json

@@ -1,6 +1,6 @@
 {
   "name": "koa-police",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Authentication framework for Koa",
   "main": "lib/index.js",
   "scripts": {

test/unit/policy.js

@@ -63,6 +63,12 @@ describe('Policy', function () {
       expect(policy.appliesTo('/foo/dashboard')).to.be.false;
       expect(policy.appliesTo('/dashboard')).to.be.false;
     });
+
+    it('should respect method', function () {
+      let policy = new Policy({path: '/path', methods: ['GET']});
+      expect(policy.appliesTo('/path', 'GET')).to.be.true;
+      expect(policy.appliesTo('/path', 'POST')).to.be.false;
+    });
   });
 
   describe('toString', function () {