node-sandcastle.js

const express = require('express')
const jwt = require('express-jwt');
const dotenv = require('dotenv');
const constants = require('./constants');
const sandcastle = require('sandcastle');

dotenv.config();
const app = express()
const port = constants.PORT

const authorize = sandcastle.fromExpress(
    process.env.SANDCASTLE_URL, 
    process.env.SANDCASTLE_API_ID, 
    process.env.SANDCASTLE_API_SECRET);

app.get('/repositories/:id',
    jwt({ secret: constants.JWT_SECRET, algorithms: ['HS256'] }),
    authorize( req => ({
        user: req.user.sub,
        relation: 'repo_reader',
        object: `github-repo:${req.params.id}`
    })),
    function(_, res) {
        res.sendStatus(200);
    }
);

app.listen(port, () => {
  console.log(`Example app listening at http://localhost:${port}`)
})