auth

auth

var http = require('http');

http.createServer(function (req, res) {
  if (!authorized(req, res, ['admin'])) {
    res.statusCode = 401;
    res.end("You don't have permissions");
  }

  res.statusCode = 200;
  res.end('Welcome back!');
}).listen(3000);

// roles is an array                             
function authorized(req, res, roles) {
  // acces db to find user's permissions
  return false;
}