Role Based Access Control for Restify

A tiny module that handles RBAC for Restify.

Usage To use, locate the file rbac.js and move it into your poject folder. Then in your Restify server file, you can require the file and use it as seen below. See the file server.js for a working example.

const RBAC = require('./rbac');

// Routes that can only be accessed by admins. 
const admin = {
    '/users': ['GET']
};

// Routes that does not need any authentication
const excludes = ['/login', '/register', '/auth/verify?code=:code'];

const rbac = new RBAC(admin, excludes);
server.use(rbac.checkAuthorization);

Note that for admin to take an effect, the user model must have an admin column to set to admin = 1

The admin object holds routes that only an administrator will see. The exludes array holds content that does not need authentication.