azure-mobile-apps-files/src/authorize.js

Add simple yet powerful file storage capabilities to the azure-mobile-apps server.

// ----------------------------------------------------------------------------
// Copyright (c) Microsoft Corporation. All rights reserved.
// ----------------------------------------------------------------------------
var utilities = require('./utilities');

module.exports = function (configuration) {
    return function (req, res, next) {
        var table = utilities.caseInsensitiveProperty(configuration.tables, req.params.tableName);

        if(table && (specifiesAuthorization(table) || specifiesAuthorization(table.files)) && !authenticated())
            res.status(401).send('You must be logged in to use this application');
        else
            next();

        function authenticated() {
            return req.azureMobile && req.azureMobile.user;
        }

        function specifiesAuthorization(target) {
            return target && (target.access === 'authenticated' || target.authorize);
        }
    }
};