moveline / rampart

Authorization module for Node.js with Connect/Express support.

Rampart

Authorization module with Connect/Express support

Installation

$ npm install rampart

Usage

Auth = require './auth'
Rampart = require 'rampart'
express = require 'express'

class Ability extends Rampart.Ability
  constructor: (user) ->
    user = user || new User

    if user.role is 'admin'
      @can 'manage', User

    else
      @can 'manage', User, {_id: user.id}

app = express()
app.use Auth.session()
app.use Rampart.express(Ability)

app.get '/', (req, res, next) ->
  res.send 401 unless req.user.isAllowed 'read', User

Tests

$ npm test

Authors Christopher Garvis & Moveline

License

MIT