liberator-mixin.jws-authorisation.core — b-social/liberator-mixin 0.0.37

Liberator mixin to authorise a request based on the scope claim in a signed jwt

with-jws-authorisation clj

(with-jws-authorisation scopes
                        secret
                        &
                        {:keys [token opts] :or {token "Bearer" opts {}}})

Returns a mixin that validates the jws token ensure it includes the scope claim and that claim has the required scope, finally it stores the authentication and authorisation state on the context under :identity

The secret can be a function which is provided the JOSE header as its single param

Takes token as an optional param that changes the type of token looked for (default is Bearer)

Takes opts as an optional param that is used to validate the claims of the token (aud, iss, sub, exp, nbf, iat)

This mixin should only be used once.

with-jws-unauthorised-as-json clj

(with-jws-unauthorised-as-json)

Returns a mixin that handles jws authentication failures returning the detailed error information as json