demux / deepstream-passport Goto Github PK

canPerformAction requires the username, message and callback arguments. We should keep this API consistent so that we can mixin other plugins for permission handling going forward

How could I use strategies such as passport-facebook? Be awesome if we could somehow configure deepstream-passport to use the different strategies, or at least oAuth2 strategies so we can then use google, twitter, facebook, github, etc.

Seems like the main issue would be setting up a webhook callback so we can listen to whether or not the user logged in.

app.get('/login/facebook/return', 
  passport.authenticate('facebook', { failureRedirect: '/login' }),
  function(req, res) {
    res.redirect('/');
  });

One way this can be done might be as follows:

ds = new Deepstream();
var httpServer =  http.createServer( app );

server.set('permissionHandler', deepstreamPassport( session, {
  canPerformAction(user, callback) {
    callback(null, user.isAdmin)
  }, httpServer <-- access point
}))

Thoughts?

In the examples they appear to be initialized in the (express) app configure part, which means it only has to be done once rather than each time.