Drop-in auth middleware for alpha-auth AT&T. 

henrikjoreteg

nathan-lafreniere

att-express-auth

    querystring = require('querystring');

            "_____________________________________________________________",

            "var express = require('express'),",

            "    auth = require('att-express-auth'),",

            "app.use(express.cookieParser());",

            "app.use(express.session({ secret: 'keyboard cat' }));",

            "app.use(attAuth.middleware({",

            "    clientId: 'YOUR CLIENT ID',",

            "    clientSecret: 'YOUR CLIENT SECRET',",

            "    scopes: ['profile', 'addessbook'],",

            "    redirectUrl: 'http://localhost:3000/secured'",

            "// a route that requires being logged in with att",

            "app.get('/my-secured-route', auth.secure(), function (req, res) {",

            "    // req.user is everything we know about the att user",

            "    // req.token is now the auth token",

    this.middleware = function (config) {

        if (!config.app || !config.clientId || !config.clientSecret || !config.redirectUrl || !config.scopes) {

            this.showHelp('You have to pass the app, clientId and clientSecret, a default redirect and a list of scopes. For example:');

        // store our configs as properties

            accountsUrl: 'https://auth.tfoundry.com'

        this.accountsUrl = 'https://auth.tfoundry.com';

        this.app.get('/auth', function (req, res) {

            var url = self.accountsUrl + '/oauth/authorize?' + querystring.stringify({

                    response_type: 'code',

                    client_id: self.clientId,

                    scope: self.scopes.join(','),

                    redirect_uri: self.redirectUrl

        this.app.get('/auth/callback', function (req, response) {

            var code = querystring.parse(req.url.split('?')[1]).code,

                url: self.accountsUrl + '/oauth/token', 

                    grant_type: 'authorization_code',

                    client_secret: self.clientSecret,

            }, function (err, res, body) {

                if (res && res.statusCode === 200) {

                    token = JSON.parse(body).access_token;

                    url: self.accountsUrl + '/me.json',

                    qs: {access_token: token},

                }, function (err, res, body) {

                    var nextUrl = req.session.nextUrl || self.redirectUrl || '/';

                    if (res && res.statusCode === 200) {

                        req.session.user = body;

                        req.session.accessToken = token;

                        delete req.session.nextUrl;

                        req.session.save(function () {

                            response.redirect(nextUrl);

                        response.redirect('/login-failed'); 

        this.app.get('/logout', function (req, res) {

            res.redirect(self.loggedOutRedirect);

        return function (req, res, next) {

                req.session.nextUrl = req.url;

                res.redirect(self.loginPageUrl);

module.exports = new ATTTAuthMiddleware();

    "author": "Henrik Joreteg <henrik@andyet.net>",

    "description": "Drop-in auth middleware for alpha-auth AT&T.",

# AT&T Alpha-auth middleware for Express.js

Super simple oauth middleware for AT&T's alpha auth

First you have to go register your application and get a client ID and client secret. Just drop those into the code below and then just add a link or button that points to `/auth` somewhere on your page and you're good to go.

The code below should work once you've dropped in your client id and secret:

    attAuth = require('att-express-auth'),

app.use(express.session({ secret: 'phone phone phone' }));

    scopes: ['profile', 'addessbook', 'locker', 'messages', 'geo'],

    accountsUrl: 'https://auth.tfoundry.com' // whatever accounts server you want to use, defaults to https://auth.tfoundry.com

    redirectUrl: 'http://localhost:3000/secured' // whatever URL you want users to be redirected to after auth

		@@ -51,8 +51,6 @@ var _ = require('underscore'),
		loggedOutRedirect: '/',
		loginPageUrl: '/login'
		loginPageUrl: '/login',
		accountsUrl: 'https://auth.tfoundry.com'
		}, config);

		// set our account and API urls
		this.accountsUrl = 'https://auth.tfoundry.com';

		// the login route
		@@ -129,2 +127,2 @@ this.app.get('/auth', function (req, res) {

		module.exports = new ATTTAuthMiddleware();
		module.exports = new ATTTAuthMiddleware();

		@@ -5,3 +5,3 @@ {
		"description": "Drop-in auth middleware for alpha-auth AT&T.",
		"version": "0.0.1",
		"version": "0.0.2",
		"dependencies": {
		@@ -8,0 +8,0 @@ "colors": "",

		@@ -28,2 +28,3 @@ # AT&T Alpha-auth middleware for Express.js
		scopes: ['profile', 'addessbook', 'locker', 'messages', 'geo'],
		accountsUrl: 'https://auth.tfoundry.com' // whatever accounts server you want to use, defaults to https://auth.tfoundry.com
		redirectUrl: 'http://localhost:3000/secured' // whatever URL you want users to be redirected to after auth
		@@ -55,2 +56,2 @@ }));

		```
		```

Improved metrics