darioteixeira / rip Goto Github PK

Presently, RIP accepts the definition of an authorize function per service. This is not granular enough, as some services may allow public access to read-only methods like GET while requiring the enforcement of stricter authorization for methods like POST or PUT.

We should keep the service-wide authorize function as fallback, but allow also the definition of custom authorization functions for particular methods.

The query part of the URI should be taken into account for routing, and handlers should have convenient access to it. The Furl library can be used for this purpose.

Refactor the Path module to use the Furl library.

This can be useful to avoid reparsing JSON Web Tokens, for instance.