redis.auth - npm Package Compare versions

Comparing version 0.1.1 to 0.1.5

index.js

@@ -62,20 +62,33 @@ //Global variables
         } else {
-          if (permissions.indexOf(response[config.key]) !== -1) {
-            //The user is authorized...
-            return next()
+          //Check permissions via grant type
+          if (Array.isArray(permissions)) {
+            var valid = false
+            permissions.map(function(p) {
+              if (p == response[config.key]) {
+                return next()
+              } else {
+                return false
+              }
+            })
           } else {
-            //Elsewise throw an error that they aren't authorized...
-            if (config.returnError == true) {
-              return res.status(403).send({
-                "error": true,
-                "status": 403,
-                "message": "Incorrect permissions supplied..."
-              })
-            } else {
-              req.error = true
-              req.errorType = "Incorrect permissions supplied..."
-              req.errorCode = 403
+            if (permissions === response[config.key]) {
+              //The user is authorized...
               return next()
             }
           }
+
+          //Elsewise throw an error that they aren't authorized...
+          if (config.returnError == true) {
+            return res.status(403).send({
+              "error": true,
+              "status": 403,
+              "message": "Incorrect permissions supplied..."
+            })
+          } else {
+            req.error = true
+            req.errorType = "Incorrect permissions supplied..."
+            req.errorCode = 403
+            return next()
+          }
+
         }
@@ -82,0 +95,0 @@ })

package.json

 {
   "name": "redis.auth",
-  "version": "0.1.1",
+  "version": "0.1.5",
   "description": "A non prescriptive Redis Authentication module for Express",
@@ -5,0 +5,0 @@ "main": "index.js",

tests.js

@@ -0,9 +1,48 @@
+//Uncache the auth module
+require.uncache = function (moduleName) {
+    // Run over the cache looking for the files
+    // loaded by the specified module name
+    require.searchCache(moduleName, function (mod) {
+        delete require.cache[mod.id];
+    });
+
+    // Remove cached paths to the module.
+    // Thanks to @bentael for pointing this out.
+    Object.keys(module.constructor._pathCache).forEach(function(cacheKey) {
+        if (cacheKey.indexOf(moduleName)>0) {
+            delete module.constructor._pathCache[cacheKey];
+        }
+    });
+};
+
+require.searchCache = function (moduleName, callback) {
+    // Resolve the module identified by the specified name
+    var mod = require.resolve(moduleName);
+
+    // Check if the module has been resolved and found within
+    // the cache
+    if (mod && ((mod = require.cache[mod]) !== undefined)) {
+        // Recursively go over the results
+        (function run(mod) {
+            // Go over each of the module's children and
+            // run over it
+            mod.children.forEach(function (child) {
+                run(child);
+            });
+
+            // Call the specified callback providing the
+            // found module
+            callback(mod);
+        })(mod);
+    }
+};
 //Require dependencies
 var redis = require("redis.token")()
 var auth = require("./index.js")(redis)
+require.uncache("./index.js")
 var request = require("supertest")
-
+//Initialize express
 var express = require("express")
 var app = express()
-
+//Create API calls
 app.post("/new", function(req,res) {
@@ -22,2 +61,15 @@ redis.generate(
 
+app.post("/new2", function(req,res) {
+  redis.generate(
+    {
+    "user": "bob",
+    "grantType": "admin"
+    },
+    function(err, token) {
+      if (err) return res.status(500).send(err)
+      return res.status(200).send(token)
+    }
+  )
+})
+
 app.get("/auth", auth("user"), function(req,res) {
@@ -27,2 +79,6 @@ return res.status(200).send("Authorized :)")
 
+app.get("/auth_admin", auth("admin"), function(req,res) {
+  return res.status(200).send("Authorized :)")
+})
+
 app.get("/free", function(req,res) {
@@ -33,35 +89,134 @@ return res.status(200).send("This point is free...")
 var token = ""
+var token2
 
+//UNIT TEST
 describe('Redis Auth', function() {
 
-  it('Make sure server is working', function (done) {
+  describe("With returnErrors = true", function() {
+    it('Make sure server is working', function (done) {
 
-    request(app)
-      .get("/free")
-      .expect(200, "This point is free...", done)
+      request(app)
+        .get("/free")
+        .expect(200, "This point is free...", done)
 
-  })
+    })
 
-  it('Generate a token', function (done) {
+    it('Generate a token', function (done) {
 
-    request(app)
-      .post("/new")
-      .expect(200)
-      .end(function(err,res) {
-        if (err) throw err
-        token = res.body.token
-        done()
-      })
+      request(app)
+        .post("/new")
+        .expect(200)
+        .end(function(err,res) {
+          if (err) throw err
+          token = res.body.token
+          done()
+        })
 
+    })
+
+    it('Generate a token for admin', function (done) {
+
+      request(app)
+        .post("/new2")
+        .expect(200)
+        .end(function(err,res) {
+          if (err) throw err
+          token2 = res.body.token
+          done()
+        })
+
+    })
+
+    it('Authenticate with middleware', function (done) {
+
+      request(app)
+        .get("/auth")
+        .set("Authorization", token)
+        .expect(200, "Authorized :)", done)
+
+    })
+
+    it('Authenticate with middleware for admin', function (done) {
+
+      request(app)
+        .get("/auth_admin")
+        .set("Authorization", token2)
+        .expect(200, "Authorized :)", done)
+
+    })
+
+    it('Should return a 403 - No header supplied', function (done) {
+
+      request(app)
+        .get("/auth")
+        .expect(403, done)
+
+    })
+
+    it('Should return a 403 - Incorrect grant type', function (done) {
+
+      request(app)
+        .get("/auth_admin")
+        .set("Authorization", token)
+        .expect(403, done)
+
+    })
+
   })
 
-  it('Authenticate with middleware', function (done) {
+  describe("With returnErrors = false", function() {
 
-    request(app)
-      .get("/auth")
-      .set("Authorization", token)
-      .expect(200, "Authorized :)", done)
+    var auth2 = require("./index.js")(redis, {
+      "header": "authorization",
+      "key": "grantType",
+      "returnErrors": false
+    })
 
+    app.get("/auth2", auth2("user"), function(req,res) {
+      if (req.errorCode == 403) return res.status(req.errorCode).send("Unauthorized...")
+      return res.status(200).send("Authorized :)")
+    })
+
+    app.get("/auth2_admin", auth2("admin"), function(req,res) {
+      if (req.errorCode == 403) return res.status(req.errorCode).send("Unauthorized...")
+      return res.status(200).send("Authorized :)")
+    })
+
+    it('Authenticate with middleware', function (done) {
+
+      request(app)
+        .get("/auth2")
+        .set("Authorization", token)
+        .expect(200, "Authorized :)", done)
+
+    })
+
+    it('Authenticate with middleware for admin', function (done) {
+
+      request(app)
+        .get("/auth2_admin")
+        .set("Authorization", token2)
+        .expect(200, "Authorized :)", done)
+
+    })
+
+    it('Should return a 403 - No header supplied', function (done) {
+
+      request(app)
+        .get("/auth2")
+        .expect(403, done)
+
+    })
+
+    it('Should return a 403 - Incorrect grant type', function (done) {
+
+      request(app)
+        .get("/auth2_admin")
+        .set("Authorization", token)
+        .expect(403, done)
+
+    })
+
   })
 
 })

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

29237

increased by272.54%

Number of package files

9

increased by12.5%

Lines of code

260

increased by103.13%

Worsened metrics

Number of low supply chain risk alerts

2

increased byInfinity%

No dependency changes