commit | 2f428585d505a36d3d74f3fac4cecf62b98d05db | [log] [tgz] |
---|---|---|
author | Brad Bishop <bradleyb@us.ibm.com> | Wed Dec 02 10:56:11 2015 -0500 |
committer | Brad Bishop <bradleyb@us.ibm.com> | Wed Dec 02 11:01:34 2015 -0500 |
tree | 74c9fdecbe5b65db1eea4f8ecad6d861dc1f649c | |
parent | 34cae732597fb3d4b18a23b6494efdbfeca2033b [diff] |
Add authentication and authorization Use session cookie plus in-memory server sessions scheme. Add /login /logout POST routes: {"data": ["username", "password"]}. Add authorization plugin with arbitrary authorization callbacks. Add valid user and user in group authorization callbacks. Require valid user authorization for all routes (besides login/logout).