galileo_auth

Description:

galileo auth

galileo_auth #
A complete authentication plugin for galileo. Inspired by Passport.
Wiki #
Click here.
Bundled Strategies #

Local (with and without Basic Auth)
Find other strategies (Twitter, Google, OAuth2, etc.) on Pub!!!

Example #
Ensure you have read the wiki.
configureServer(galileo app) async {
var auth = galileoAuth<User>();
auth.serializer = ...;
auth.deserializer = ...;
auth.strategies['local'] = LocalAuthStrategy(...);

// POST route to handle username+password
app.post('/local', auth.authenticate('local'));

// Using galileo's asynchronous injections, we can parse the JWT
// on demand. It won't be parsed until we check.
app.get('/profile', ioc((User user) {
print(user.description);
}));

// Use a comma to try multiple strategies!!!
//
// Each strategy is run sequentially. If one succeeds, the loop ends.
// Authentication failures will just cause the loop to continue.
//
// If the last strategy throws an authentication failure, then
// a `401 Not Authenticated` is thrown.
var chainedHandler = auth.authenticate(
['basic','facebook'],
authOptions
);

// Apply galileo_auth-specific configuration.
await app.configure(auth.configureServer);
}
copied to clipboard
Default Authentication Callback #
A frequent use case within SPA's is opening OAuth login endpoints in a separate window.
galileo_client
provides a facility for this, which works perfectly with the default callback provided
in this package.
configureServer(galileo app) async {
var handler = auth.authenticate(
'facebook',
galileoAuthOptions(callback: confirmPopupAuthentication()));
app.get('/auth/facebook', handler);

// Use a comma to try multiple strategies!!!
//
// Each strategy is run sequentially. If one succeeds, the loop ends.
// Authentication failures will just cause the loop to continue.
//
// If the last strategy throws an authentication failure, then
// a `401 Not Authenticated` is thrown.
var chainedHandler = auth.authenticate(
['basic','facebook'],
authOptions
);
}
copied to clipboard
This renders a simple HTML page that fires the user's JWT as a token event in window.opener.
galileo_client exposes this as a Stream:
app.authenticateViaPopup('/auth/google').listen((jwt) {
// Do something with the JWT
});
copied to clipboard