PavelZX
PavelZX
defmodule ImconWeb.Router do
use ImconWeb, :router
pipeline :browser do
plug :accepts, ["html"]
plug :fetch_session
plug :fetch_flash
plug :protect_from_forgery
plug :put_secure_browser_headers
end
pipeline :auth do
plug Imcon.Plugs
end
pipeline :api do
plug :accepts, ["json", "xml"]
plug :fetch_session
end
scope "/api", ImconWeb do
pipe_through :api
scope "/v1" do
post "/registrations", RegistrationController, :create
post "/sessions", SessionController, :create
delete "/sessions", SessionController, :delete
get "/current_user", CurrentUserController, :show
resources "/board", BoardController, only: [:index, :create] do
resources "/card", CardController, only: [:show]
end
end
end
scope "/", ImconWeb do
pipe_through :browser # Use the default browser stack
get "/*path", PageController, :index
end
end
…
defmodule Imcon.Plugs do
use Guardian.Plug.Pipeline,
otp_app: :imcon,
error_handler: ImconWeb.ErrorHandler,
module: Imcon.Auth.Guard
plug Guardian.Plug.VerifySession, claims: %{"typ" => "access"}
plug Guardian.Plug.EnsureAuthenticated, handler: ImconWeb.SessionController
plug Guardian.Plug.LoadResource, allow_blank: true
end
…
defmodule Imcon.Auth.Guard do
use Guardian, otp_app: :imcon
def subject_for_token(user, _claims) do
sub = to_string(user.id)
{:ok, sub}
end
def subject_for_token(_, _) do
{:error, :reason_for_error}
end
def resource_from_claims(claims) do
id = claims["sub"]
user = Imcon.Auth.get_user(id)
{:ok, user}
end
def resource_from_claims(_claims) do
{:error, :reason_for_error}
end
end
0
PavelZX
I tried this way and that, it turns out that this error occurs when trying to remake authentification under Gardian 1. I did it on the basis of a working application, but I mistook something somewhere, most likely. GitHub - danbee/chess: Multiplayer chess game in Elixir/Phoenix and React · GitHub
He took an example at random, thought it would be easier to build on it. Accordingly, several functions in the new Guardian work differently, so the rules as best they could, so that during the compilation they would not swear.
I read the forum, this is an old problem, how to organize authentication and authorization. In the Phoenix from the box it is not, as for example in Django.
0