feat: add @Authorized() decorator

[acuntex]

Is there any chance to create an Authorized-Decorator like in routing controllers?

Would be nice, if you could limit the connections to only authorized users (directly at connect or at message-level) and to inject the user.

[NoNameProvided]

Hi @acuntex!

I am not familiar with the project and I don't think pleerock will have any free time soon to work on this project. However, the community can pick this up and implement and document it then it can be merged.

The first step would be to actually discuss your proposal. How do you expect the @Authorized decorator to work? The first message must include an authorization message or every message should contain the authorization payload?

[fr3fou]

Any news or workarounds? I'm trying to the same thing - protect some of my socket.io "routes".

[rustamwin]

@fr3fou maybe we do it, also you can use middlewares.

[fr3fou]

Do you have an example of the thing I'm trying to accomplish - authentication with socket.io. I'm using passport.js, routing-controllers, socket-controllers and socket.io. Right now for some reason calling req.isAuthenticated() gives me false for some reason.

[rustamwin]

See sample5

@Middleware()
export class AuthenticationMiddleware implements MiddlewareInterface {

    use(socket: any, next: ((err?: any) => any)): any { // where socketio instance. not connected socket instance!
        console.log("authentication..."); // your auth logic here
        next();
    }

}

[fr3fou]

How would I use the middleware only for specific routes, not all?

[rustamwin]

What did you mean "routes"? events?

[rustamwin]

if yes, it is problem

[fr3fou]

Events / messages

[rustamwin]

For events no, because the middlewares works globally. As I said before it is problem

[attilaorosz]

You can implement your own auth solution using interceptors per event, or use the middleware per connection.

[github-actions[bot]]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.