Implement OAuth2 server, link oauth:Client and auth::Oauth2Client, implement permission checks

2020-05-16 23:55:08 -05:00
parent 6f621f5891
commit d558f21375
51 changed files with 2808 additions and 159 deletions
--- a/app/routing/routers/api/v1/message.routes.js
+++ b/app/routing/routers/api/v1/message.routes.js
@@ -2,15 +2,21 @@ const message_routes = {
    prefix: '/api/v1/message',

    middleware: [
-        'auth:UserOnly',
+        'auth:APIRoute',
    ],

    get: {
-        '/banners': ['controller::api:v1:Message.get_banners'],
+        '/banners': [
+            ['middleware::api:Permission', { check: 'v1:message:banners:get' }],
+            'controller::api:v1:Message.get_banners',
+        ],
    },

    post: {
-        '/banners/read/:banner_id': ['controller::api:v1:Message.read_banner'],
+        '/banners/read/:banner_id': [
+            ['middleware::api:Permission', { check: 'v1:message:banners:update' }],
+            'controller::api:v1:Message.read_banner',
+        ],
    },
 }