AuthGuardian support for adding express.js permissions directly

[sgrove]

We've been working hard on AuthGuardian to make securing every app, server, and
API as straight-forward as possible. Today we've pushed support for adding
express.js permissions for our onegraph-auth integration as a direct effect
inside AuthGuardian.

For example, if we wanted to only allow users to access the /we-rock route on
our express app if they were logged into Spotify, we could use these rules:

When this user on Spotify login status is true

Then On express js add permissions [to-rock]

and that would give us the resulting JWT:

{
  "iss": "OneGraph",
  "aud": "https://serve.onegraph.com/dashboard/app/00000000-0000-0000-0000-000000000000",
  "iat": 1579590299,
  "exp": 1579676699,
  "permissions": [
    "to-rock"
  ]
}

which we can use just like in our example expressjs + AuthGuardian app:

app.get("/we-rock", guard.check(["audiophile"]), function(req, res) {
  // Now users can only access this route...
  // with express permission to-rock!
});

Check out the source code of the example
app if you're looking
for how to get started with Express and AuthGuardian!