@voilab/vmol-auth

vmol-users

Components

Auhentication

Expect a JWT in ctx.meta.token. Will parse and check the JWT and then put the resulting token in ctx.locals.token. If the token is invalid, expired or malformed, a MoleculerClientError exception will be thrown. If no token is provided, no exception is thrown and ctx.locals.token is undefined.

Authorization

Expects an array role inside ctx.locals.token. Will request Casl abilites definition from the abilities service and match the requested action against the abilities. If the user doesn't have access to that action, a MoleculerClientError exception will be thrown.

Usage

To enable, add the middleware to your services.

module.exports = {
    name: 'myservice',

    /**
     * Mixins
     */
    mixins: [ AuthorizationMixin, AuthenticationMixin ],
};

When usign both AuthorizationMixin and AuthenticationMixin, authentication must be set after authorization.

Automatic ACL validation

Manual ACL validation