Feature: group authentication based on route params about express-stormpath HOT 5 CLOSED

Awesome! Glad you like it :)

I haven't really thought about this -- but it should be possible without too much tweaking. This would probably be something we could include in the future.

-Randall

from express-stormpath.

Above commit (wrenoud/stormpath-express@b8bd59d) is just a thought. And I realize you may have additional concerns to think about.

from express-stormpath.

Hmmmm. Thanks for the commit, but after thinking about this a bit, I don't think it's a common enough use case to warrant modifying the middleware with optional params.

I think that what I'll probably add in the near future is a more flexible authorization check, such that you can include variables / combinations of AND / OR groupings. This would allow you to assert a lot more complex stuff with a single API.

In the meantime, you could most likely handle this in a special case by doing something like:

app.get('/blah', stormpath.loginRequired, function(req, res) {
  req.locals.user.getGroups(function(group) {
   if (group is valid) {
     ...;
    }
  }
});

It's not perfect of course, but would be a suitable interim until I can think of a really clean way of handling a better authorization system :(

Sorry about that ><

This library is still pretty new, so I'm trying to think of the absolute drop-dead simplest way to handle all forms of authorization ^^

Also: you have a SICK beard. Love that shit. +100000 <33333

from express-stormpath.

Completely understand. I'll workaround until you have a slick implementation.

Thanks!

from express-stormpath.

Closing this issue for now (still have an awesome beard tho)!

from express-stormpath.