ember-simple-auth setup for username/password cookie auth

.ember-cli

{
  /**
    Ember CLI sends analytics information by default. The data is completely
    anonymous, but there are times when you might want to disable this behavior.

    Setting `disableAnalytics` to true will prevent any data from being sent.
  */
  "disableAnalytics": false,

  // Use SSL for development server by default
  "ssl": true
}

app_authenticators_basic.js

import BaseAuthenticator from 'ember-simple-auth/authenticators/base';
import fetch from 'fetch';
import Ember from 'ember';

const {
  RSVP
} = Ember;

const checkStatus = (response) => {
  if (response.status >= 200 && response.status < 300) {
    return response
  }

  const error = new Error(response.statusText)
  error.response = response
  error.statusCode = response.status;
  throw error
};

const parseJSON = (response) => {
  return response.json()
};

export default BaseAuthenticator.extend({
  authenticate(username, password) {
    const req = {
      method: 'POST',
      credentials: 'same-origin',
      headers: {
        'accept': 'application/json',
        'content-type': 'application/json'
      },
      body: JSON.stringify({ username, password })
    };

    return fetch('/api/v1/sessions', req)
      .then(checkStatus)
      .then(parseJSON)
      .then((newSession) => newSession.session);
  },

  invalidate() {
    const req = {
      method: 'DELETE',
      credentials: 'same-origin'
    };

    return fetch('/api/v1/sessions/_current', req)
      .then(checkStatus);
  },

  restore(data) {
    if (data) {
      return RSVP.resolve(data);
    }

    return RSVP.reject();
  }
});

app_components_login-form.js

import Ember from 'ember';
import { task } from 'ember-concurrency';

const {
  Component,
  get,
  getProperties,
  inject
} = Ember;

const noop = () => {};

export default Component.extend({
  session: inject.service(),

  classNames: [ 'login-form' ],
  tagName: 'form',

  username: null,
  password: null,

  submit(ev) {
    ev.preventDefault();
    get(this, 'authenticateTask').perform().catch(noop);
  },

  authenticateTask: task(function * () {
    const { username, password } = getProperties(this, 'username', 'password');
    yield get(this, 'session').authenticate('authenticator:basic', username, password);
  }).drop()
});

app_routes_application.js

import Ember from 'ember';
import ApplicationRouteMixin from 'ember-simple-auth/mixins/application-route-mixin';

const {
  Route
} = Ember;

export default Route.extend(ApplicationRouteMixin);

app_routes_authenticated.js

import Ember from 'ember';
import AuthenticatedRouteMixin from 'ember-simple-auth/mixins/authenticated-route-mixin';

const {
  get,
  inject,
  Route
} = Ember;

export default Route.extend(AuthenticatedRouteMixin, {
  session: inject.service('session'),
  store: inject.service('store'),

  model() {
    const userId = get(this, 'session.data.authenticated.id');
    return get(this, 'store').findRecord('employee', userId);
  },

  afterModel(employee) {
    // make sure venue and comapny are loaded
    return get(employee, 'venue')
      .then(() => get(employee, 'venue.company'));
  },

  actions: {
    error(error /* , transition */) {
      if (get(error, 'errors.0.status') === '401') {
        return get(this, 'session').invalidate();
      }

      return true;
    },

    logout() {
      return get(this, 'session').invalidate();
    }
  }
});

app_routes_login.js

import Ember from 'ember';
import UnauthenticatedRouteMixin from 'ember-simple-auth/mixins/unauthenticated-route-mixin';

const {
  Route
} = Ember;

export default Route.extend(UnauthenticatedRouteMixin);

app_templates_components_login-form.hbs

<label class='login-form__field'>
  Username

  <input type='email'
    value={{username}}
    disabled={{authenticateTask.isRunning}}
    oninput={{action (mut username) value='target.value'}}>
</label>

<label class='login-form__field'>
  Password

  <input type='password'
    value={{password}}
    disabled={{authenticateTask.isRunning}}
    oninput={{action (mut password) value='target.value'}}>
</label>

<button type='submit' disabled={{authenticateTask.isRunning}}>
  Login
</button>

config_environment.js

/* eslint-env node */
'use strict';

module.exports = function(environment) {
  let ENV = {
    modulePrefix: 'ven-u',
    environment,
    rootURL: '/',
    locationType: 'auto',
    EmberENV: {
      FEATURES: {
        // Here you can enable experimental features on an ember canary build
        // e.g. 'with-controller': true
      },
      EXTEND_PROTOTYPES: {
        // Prevent Ember Data from overriding Date.parse.
        Date: false
      }
    },

    APP: {
      defaultRoute: 'venue'
    },

    'ember-simple-auth': {
      routeAfterAuthentication: 'venue',
      routeIfAlreadyAuthenticated: 'venue'
    }
  };

  if (environment === 'development') {
    // ENV.APP.LOG_RESOLVER = true;
    // ENV.APP.LOG_ACTIVE_GENERATION = true;
    // ENV.APP.LOG_TRANSITIONS = true;
    // ENV.APP.LOG_TRANSITIONS_INTERNAL = true;
    // ENV.APP.LOG_VIEW_LOOKUPS = true;
  }

  if (environment === 'test') {
    // Testem prefers this...
    ENV.locationType = 'none';

    // keep test console output quieter
    ENV.APP.LOG_ACTIVE_GENERATION = false;
    ENV.APP.LOG_VIEW_LOOKUPS = false;

    ENV.APP.rootElement = '#ember-testing';

    ENV['ember-tether'] = {
      bodyElementId: 'ember-testing'
    };
  }

  // if (environment === 'production') {

  // }

  return ENV;
};

ssl_server.crt

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

ssl_server.csr

-----BEGIN CERTIFICATE REQUEST-----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-----END CERTIFICATE REQUEST-----

ssl_server.key

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----