loopback-example-aaa

A combination of loopback-example-access-control and loopback-example-passport
Focus on MS ADFS / LDAP (MS AD) integration for the non-internet use case

Use Case:

use of boot directory for global AAA as starting point
model AAA or ACL when understood

Authentication:

Authenticate users via LDAP
Only one User as Local: user of last resort for diagnostics if at all needed
token in header contra url/cookie
expose group membership

Authorization:

Roles mapping to LDAP groups (membership at authentication time)
Pierres hint: Investigate Dynamic Roles

Accounting:

Log changes to models and make available to a Role

Note:

It is presumed that Internet users would be authenticated/authorized by an OAuth system ...

Unkowns:

many :)
how would middleware be used in a global AAA that is required for all models

Play:

At the moment, I have placed moved some view specific things to boot/views.js
Is it possible to define if Cookies and tokens are used in boot/authentication.js: http://docs.strongloop.com/display/public/LB/Making+authenticated+requests

General Doc: