AnguarJS Authentication

1_README.md

AngularJS Authentication Module

This is based on http://www.jvandemo.com/learn-how-to-make-authentication-in-your-angular-applications-simpler-and-more-consistent/ Role management added additionally.

This is built based on best practices provided in https://github.com/johnpapa/angular-styleguide#resolving-promises-for-a-controller

This module uses https://github.com/grevory/angular-local-storage to store session data

2_auth.js

(function () {
    'use strict';

    angular
        .module('auth', ['LocalStorageModule'])
        .config(authInterceptor)
        .run(runRestrictions);


    // Configurations
    authInterceptor.$inject = ['$httpProvider'];

    /* @ngInject */
    /**
     * Routes configuration
     * @param $httpProvider
     */
    function authInterceptor ($httpProvider) {
        $httpProvider.interceptors.push(interceptor);
    }
    interceptor.$inject = ['$rootScope'];

    /* @ngInject */
    function interceptor ($rootScope) {
        return {
                'request': function(config) {
                    config.headers['Authorization'] = 'Bearer ' + ($rootScope.session
                        ? $rootScope.session.getAccessToken() : '');
                    return config;
                }
            }
    }

    runRestrictions.$inject = ['$rootScope', '$location', 'session'];
    
    /* @ngInject */
    function runRestrictions ($rootScope, $location, session) {
        $rootScope.auth = auth;
        $rootScope.session = session;
        var roleHomes = {
            'Developer': '/home'
        };
        $rootScope.$on('$routeChangeStart', function (event, next) {
            var user = session.getUser();
            if(!next.$$route) return;
            if((next.$$route.isPublic && user) ||
                (!next.$$route.isPublic && user && next.$$route.roles.indexOf(user.role) === -1)) {
                $location.path(roleHomes[user.role])
            }
        });
    }

})();

3_session.service.js

(function () {
    'use strict';

    angular
        .module('auth')
        .service('session', session);

    session.$inject = ['localStorageService'];

    /* @ngInject */
    function session(localStorageService) {
        var session = this;
        session._user = JSON.parse(localStorageService.get('session.user'));
        session._accessToken = localStorageService.get('session.accessToken');

        session.getUser = getUser;
        session.setUser = setUser;

        session.getAccessToken = getAccessToken;
        session.setAccessToken = setAccessToken;

        session.destroy = destroy;
        ////////////////

        function getUser() {
            return session._user
        }
        function setUser(user) {
            session._user = user;
            localStorageService.set('session.user', JSON.stringify(user));
            return session;
        }

        function getAccessToken() {
            return session._accessToken;
        }
        function setAccessToken(accessToken) {
            session._accessToken = accessToken;
            localStorageService.set('session.accessToken', accessToken)
        }

        function destroy () {
            session._user = null;
            session._accessToken = null;
            localStorageService.clearAll();
        }

    }

})();

4_auth.service.js

(function () {
    'use strict';

    angular
        .module('auth')
        .service('auth', auth);

    auth.$inject = ['$http', 'session'];

    /* @ngInject */
    function auth($http, session) {
        this.signIn = signIn;
        this.getUser = getUser;
        this.logout = logout;

        ////////////////

        function signIn(credentials) {
            return $http
                .post('/api/signin', credentials)
                .then(function(result){
                    session.setAccessToken(result.data.token);
                    return result.data.token;
                });
        }

        function getUser() {
            return $http
                .get('/api/me')
                .then(function(result){
                    session.setUser(result.data.user);
                    return result.data.user;
                });
        }

        function logout() {
            return $http
                .get('/api/signout')
                .then(function(result){
                    session.destroy();
                    return result;
                })
        }
    }

})();

5_routes.js

(function () {
    'use strict';

    angular
        .module('app', [])
        .config(routes);

    routes.$inject = ['$routeProvider'];

    /* @ngInject */
    function routes ($routeProvider) {
        $routeProvider.when('/', {
            templateUrl: 'landing/Landing.html',
            controller:  'LandingController',
            controllerAs: 'vm',

            // These variables are used for authentication
            isPublic: true,
            roles: []
        })
    }

})();