passport-scope-restrict
Advanced tools
Readme
Enforce authorization based on OAuth scopes set by Passport.js.
This is typically used to protect an API by requiring that the scopes associated with the
client are allowed to call the API. Check out passport-http-bearer for one strategy you can
build on to achieve this.
var express = require('express')
, passport = require('passport')
, restrict = require('passport-scope-restrict');
// setup your Express app, and configure Passport with some strategy which add `scopes` to `req.authInfo`.
app.use('/api/admin', restrict('admin'));
MIT. See LICENSE for details.
FAQs
Enforce authorization based on OAuth scopes set by Passport.js.
We found that passport-scope-restrict demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Application Security
New SEC disclosure rules aim to enforce timely cyber incident reporting, but fear of job loss and inadequate resources lead to significant underreporting.
Security News
The Python Software Foundation has secured a 5-year sponsorship from Fastly that supports PSF's activities and events, most notably the security and reliability of the Python Package Index (PyPI).
Security News
LDAPjs, an LDAP Client and Server API for Node.js, was decommissioned after its maintainer received an abusive email from a user, raising concerns about this form of abuse as a potential attack vector.