@quarks/quarks-iam/routes/authorizations.js

A modern authorization server built to authenticate your users and protect your APIs

/**
 * Module dependencies
 */

var AccessToken = require('../models/AccessToken')
var Client = require('../models/Client')
var authenticate = require('../oidc').authenticateUser

/**
 * Exports
 */

module.exports = function (server) {
  /**
   * Authorizations
   * List clients a user has authorized.
   */

  server.get('/authorizations', authenticate, function (req, res, next) {
    Client.listAuthorizedByUser(req.user._id, function (err, clients) {
      if (err) { return next(err) }
      res.json(clients)
    })
  })

  /**
   * Revoke authorization for a client
   */

  server.delete('/authorizations/:clientId', authenticate, function (req, res, next) {
    var uid = req.user && req.user._id
    var cid = req.params.clientId

    AccessToken.revoke(uid, cid, function (err, confirm) {
      if (err) { return next(err) }
      res.sendStatus(204)
    })
  })
}