Plugin that supports bearer token security using our idenity store.
npm install hapi-auth-anonymous







(C) 2014 Martin Wawrusch
HAPI plugin that supports anonymous logins from mobile devices.
1. PLEASE NOTE THAT SIGNIFICANT PARTS OF THE CODE HAVE BEEN USED FROM ANOTHER NPM MODULE (hapi-auth-bearer by Jordan Stout)
2. ALSO, THIS IS WORK IN PROGRESS
3. THIS IS OBVIOUSLY NOT SECURE AS IN BANK LEVEL SECURITY - IT'S FOR CASUAL APPS ONLY
The scenario is like this: A user opens an app on a mobile device, and is identified by some persistent UUID. Each request to the backend includes an Authorization: anonymous [UUID] header. The UUID can be any format as long as it is a string. This module now ensures that, either a new user is created in the backend or an existing user with that id is retrieved. Voila, we support anonymous users.
This module requires the following HAPI modules to be loaded:
* hapi-oauth-store-multi-tenant
* hapi-user-store-multi-tenant
and a mongoose connector plugin (does not have to be this one)
``coffeescript
Hapi = require "hapi"
hapiAuthAnonymous = require 'hapi-auth-anonymous'
hapiOauthStoreMultiTenant = require 'hapi-oauth-store-multi-tenant'
hapiUserStoreMultiTenant = require 'hapi-user-store-multi-tenant'
hapiMongooseDbConnector = require 'hapi-mongoose-db-connector'
server = new Hapi.Server config.server.port, config.server.host, {}
pluginConf = [
plugin: hapiUserStoreMultiTenant
options:
autoIndex: false
,
plugin: hapiOauthStoreMultiTenant
options:
autoIndex: false
,
plugin: hapiAuthAnonymous
options:
clientId: '53af466e96ab7635384b71fa'
_tenantId: '53af466e96ab7635384b71fb'
scope: ['user-anonymous-access'] # This is optional and represents the default
,
plugin: hapiMongooseDbConnector
options:
mongodbUrl: config.services.mongodbUrl
]
server.pack.register pluginConf, (err) ->
throw err if err
server.auth.strategy 'default', 'hapi-auth-anonymous', {}
server.auth.default 'default'
server.start ->
# Do something
module.exports = server
``
The scope allows you to limit access or functionality in your routes. For example, a route that returns data can only return a subset for users in scope anonymous-access
* hapi-auth-bearer-mw
* hapi-auth-anonymous
* hapi-loggly
* hapi-mandrill
* hapi-mongoose-db-connector
* hapi-oauth-store-multi-tenant
* hapi-routes-authorization-and-session-management
* hapi-routes-oauth-management
* hapi-routes-roles
* hapi-routes-status
* hapi-routes-tenants-setup
* hapi-routes-users-authorizations
* hapi-routes-users
* hapi-user-store-multi-tenant
and additionally
* api-pagination
* mongoose-oauth-store-multi-tenant
* mongoose-rest-helper
* mongoose-user-store-multi-tenant
Copyright (c) 2014 Martin Wawrusch