The various OAuth and OAuth end points have different names for the parameters,
and some will accept the token in the header, others in the query string. Some
have a refresh token. Interested in how you are going to support all the
various snowflakes of OAuth / OAuth 2 :)
On Apr 19, 2012, at 9:46 PM, Jed Schmidt wrote:
> Chenye,
>
> Sajak is authentication agnostic. The only special case is basic auth,
> where it will parse the base64 credentials into a username and
> password. All other schemes pass the scheme name and token, so for
> oauth, your user authenticate method would look like this:
>
> User.prototype.authenticate = function(auth, cb) {
> // for oauth:
> // auth.scheme == "oauth"
> // auth.token == "<user-oauth-token>"
> }
>
> Jed
>
> On Fri, Apr 20, 2012 at 9:44 AM, 梁辰晔 <[email protected]> wrote:
>> Hi, only basic user/password authentication now,
>> are you plan to support openid, oauth and the others?
>>
>> 在 2012年4月19日 下午9:26，Jed Schmidt <[email protected]>写道：
>>>
>>> Hey all, good evening from Tokyo.
>>>
>>> I've been working on a REST API facelift recently for a client, and
>>> extracted out what I learned into a library.
>>>
>>> It's called Sajak: Simple Authenticated JSON API Kit.
>>>
>>> It's a zero-dependency (but Express/Connect compatible) module in ~270
>>> LOC that turns a collection of model constructors into an http
>>> listener that handles HATEOAS-friendly resolution, routing,
>>> authentication, and authorization for you, like this:
>>>
>>> ```
>>> var http = require("http")
>>> , sajak = require("sajak")
>>> , server = http.createServer()
>>>
>>> function User(){ ... }
>>> User.prototype = {
>>> authenticate: function(auth, cb){ ... },
>>> save: function(cb){ ... },
>>> fetch: function(cb){ ... }
>>> }
>>>
>>> function TodoItem(){ ... }
>>> TodoItem.prototype = {
>>> authorize: function(user, action, cb){ ... },
>>> save: function(cb){ ... },
>>> fetch: function(cb){ ... },
>>> destroy: function(cb){ ... }
>>> }
>>>
>>> server.on("request", sajak([User, TodoItem]).router)
>>> server.listen(3000)
>>> ```
>>>
>>> Sajak wires everything up so that you don't have to pepper your routes
>>> with redundant/tedious/error-prone
>>> authentication/authorization/resolution logic. It's useful as a
>>> JSON-only API framework, or as a drop-in replacement for your
>>> Express/Connect API router.
>>>
>>> Check it out on Github:
>>>
>>> https://github.com/jed/sajak
>>>
>>> Any and all feedback appreciated:
>>>
>>> http://news.ycombinator.com/item?id=3862841
>>>
>>> Jed Schmidt
>>> http://jed.is
>>>
>>> --
>>> Job Board: http://jobs.nodejs.org/
>>> Posting guidelines:
>>> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
>>> You received this message because you are subscribed to the Google
>>> Groups "nodejs" group.
>>> To post to this group, send email to [email protected]
>>> To unsubscribe from this group, send email to
>>> [email protected]
>>> For more options, visit this group at
>>> http://groups.google.com/group/nodejs?hl=en?hl=en
>>
>>
>> --
>> Job Board: http://jobs.nodejs.org/
>> Posting guidelines:
>> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
>> You received this message because you are subscribed to the Google
>> Groups "nodejs" group.
>> To post to this group, send email to [email protected]
>> To unsubscribe from this group, send email to
>> [email protected]
>> For more options, visit this group at
>> http://groups.google.com/group/nodejs?hl=en?hl=en
>
> --
> Job Board: http://jobs.nodejs.org/
> Posting guidelines:
> https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
> You received this message because you are subscribed to the Google
> Groups "nodejs" group.
> To post to this group, send email to [email protected]
> To unsubscribe from this group, send email to
> [email protected]
> For more options, visit this group at
> http://groups.google.com/group/nodejs?hl=en?hl=en
--
Job Board: http://jobs.nodejs.org/
Posting guidelines:
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en
