Network.Wai.Middleware.BearerTokenAuth

Contents

Description

Implements Bearer Token Authentication as a WAI Middleware.

This module is based on HttpAuth.

Synopsis

Middleware

You can choose from three functions to use this middleware:

tokenListAuth is the simplest to use and accepts a list of valid tokens;
tokenAuth can be used to perform a more sophisticated validation of the accepted token (such as database lookup);
tokenAuth' is similar to tokenAuth, but it also passes the Request to the validation function.

Perform token authentication based on a list of allowed tokens.

tokenListAuth ["secret1", "secret2"]

Arguments

:: TokenValidator	Function that determines whether the token is valid
-> Middleware

Performs token authentication.

If the token is accepted, leaves the Application unchanged. Otherwise, sends a 401 Unauthorized HTTP response.

tokenAuth (\tok -> return $ tok == "abcd" )

Arguments

:: (Request -> TokenValidator)	Function that determines whether the token is valid
-> Middleware

Like tokenAuth, but also passes the Request to the validator function.

Token validation

Type synonym for validating a token