Network.Wai.Middleware.BearerTokenAuth

Implements Bearer Token Authentication as a WAI Middleware.

This module is based on HttpAuth.

Middleware

You can choose from three functions to use this middleware:

1. tokenListAuth is the simplest to use and accepts a list of valid tokens;
2. tokenAuth can be used to perform a more sophisticated validation of the accepted token (such as database lookup);
3. tokenAuth' is similar to tokenAuth, but it also passes the Request to the validation function.

tokenListAuth :: [ByteString] -> Middleware

Perform token authentication based on a list of allowed tokens.

tokenListAuth ["secret1", "secret2"]

tokenAuth

Arguments

:: TokenValidator

Function that determines whether the token is valid

-> Middleware

Performs token authentication.

If the token is accepted, leaves the Application unchanged. Otherwise, sends a 401 Unauthorized HTTP response.

tokenAuth (\tok -> return $ tok == "abcd" )

tokenAuth'

Arguments

:: (Request -> TokenValidator)

Function that determines whether the token is valid

-> Middleware

Like tokenAuth, but also passes the Request to the validator function.

Token validation

type TokenValidator = ByteString -> IO Bool

Type synonym for validating a token