12 Commits

Author	SHA1	Message	Date
Alex Kocharin	3c16e59a5c	Refactor authorization plugins	2015-04-09 01:51:34 +03:00
Chris Breneman	0af72f0c68	Pass allow_access calls that don't use the can() middleware through the plugin interface	2015-02-24 22:21:57 -05:00
Chris Breneman	76a1e8df80	Add package settings and authorization plugin system	2015-02-24 14:28:16 -05:00
Alex Kocharin	0aed9ee9f4	Merge pull request #200 from maxlaverse/master ... Fixes NPE on POST _session when npm tries to authenticate	2015-02-12 14:26:15 +03:00
Alex Kocharin	79e2ff2ee8	change 403 error with 409 in adduser ... Because npm does only accept 409, see #184.	2015-02-12 14:18:47 +03:00
maxlaverse	e5880841f3	Added missing argument ... Added missing 'next' argument to the '/_session' route callback	2015-02-06 19:59:18 +01:00
Alex Kocharin	bad7aee4ec	use /-/whoami endpoint instead of /whoami ... Allows to get rid of referer magic, so it's a nice change to have. See this issue for details: https://github.com/npm/npm-registry-client/issues/88	2014-12-05 05:04:37 +03:00
Alex Kocharin	cf71b9dc9e	encrypt user+pass instead of tokens for now	2014-11-24 22:53:05 +03:00
Alex Kocharin	a425c5e2ff	add scoped packages draft	2014-11-16 20:46:01 +03:00
Alex Kocharin	2f541130ab	auth tokens draft	2014-11-16 15:37:50 +03:00
Alex Kocharin	ca3cb6487d	refactor log and etagify middlewares	2014-11-13 22:01:20 +03:00
Alex Kocharin	4c11a42d21	separate web and api routers to different files	2014-11-13 20:14:21 +03:00