Middleware

Express middleware for authentication, authorization, and scope-based access control.

Overview

AuthSafe provides middleware functions for protecting routes: requireAuth() to require authentication, optionalAuth() for optional authentication, requireScope() for specific scopes, and requireAnyScope() for any of specified scopes.

Basic Usage

import { requireAuth, requireScope } from 'authsafe-express';

app.get('/dashboard', requireAuth(), (req, res) => {
  res.json({ user: req.auth });
});

app.delete('/admin/users/:id', requireScope('admin:write'), (req, res) => {
  // Only users with admin:write scope can access
});