PostgREST.Auth

This module provides functions to deal with the JWT authorization (http://jwt.io). It also can be used to define other authorization functions, in the future Oauth, LDAP and similar integrations can be coded here.

Authentication should always be implemented in an external service. In the test suite there is an example of simple login function that can be used for a very simple authentication system inside the PostgreSQL database.

Documentation

containsRole :: JWTClaims -> Bool

Whether a response from jwtClaims contains a role claim

jwtClaims :: Monad m => AppConfig -> LByteString -> UTCTime -> ExceptT Error m JWTClaims

Receives the JWT secret and audience (from config) and a JWT and returns a map of JWT claims.

type JWTClaims = HashMap Text Value