'Authorization With User Roles (RBAC)' authentication authorization
role, they will not be able to edit all the blogs cause it will execute into the firstLet’s continue with our example above and see how we can actually implement it in an app usingThe code snippets below are for a NodeJS backend, but similar logic applies for the other backend SDKs offered by SuperTokens as well. All the code snippets are as per SuperTokens Node SDK versionSuperTokens needs to know about the roles and permissions before they can be assigned to users.
import UserRoles from "supertokens-node/recipe/userroles"; // the value of roleToAssign needs to be fetched by you. // For example, you could check if the user's email is of a certain domain, // and if it is, then they would be an admin, else not. if { // the userId belongs to the user who just signed up. await UserRoles.addRoleToUser; } else { await UserRoles.
Once you have completed session verification in your APIs, you can retrieve the user ID of the logged in user and get their roles and permissions using that: import { verifySession } from "supertokens-node/recipe/session/framework/express"; import UserRoles from "supertokens-node/recipe/userroles"; app.delete, async => { let blogId=req.body.blogId let userId=req.session.getUserId; let roles=await UserRoles.getRolesForUser.roles // if the user is an admin, we will be ["admin"], else we will get ["regular-user"] let permissions=await UserRoles.getPermissionsForRole.
For these use cases, there are dedicated authorization solutions which you can integrate with your existing authentication provider. Some examples are:
Australia Latest News, Australia Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Top 12 NFT Tools for Analytics, Research and Portfolio Management | HackerNoonOur Top 12 NFT Tools for analytics, NFT valuation, NFT social intelligence, portfolio management suites, bots and more.
Read more »
How AI Is Helping To Diagnose Cancer | HackerNoonRead how artificial intelligence is used in digital pathology for cancer diagnosis and reveal MobiDev’s research on WSI processing using machine learning models
Read more »
Five Tips For Hiring Software Developers Internationally | HackerNoonThere are many benefits to hiring software developers abroad. Read our article to learn the top 5 tips for hiring software developers internationally.
Read more »
How Social Trading Paves the Way for a Decentralized Future | HackerNoonThe lack of full ownership and open access threatens the sustainability of wealth preservation and growth for traders. Social trading could be the solution.
Read more »
BITLEVEX Secures $50m From GEM Digital | HackerNoonEstonia-based investment platform BITLEVEX announced that it had secured an investment facility totaling $50M from GEM Digital Limited.
Read more »
Blockchain and Decentralized Networks are the Future of Cybersecurity | HackerNoonNaoris Protocol is the Decentralized CyberSecurity Mesh that protects devices across the digital world from cyber threats and associated risks.
Read more »