Hapi-SSPI

Implements Windows SSPI authentication for Hapi.

Example

'use strict';
const hapi = require('hapi');
 
const server = new hapi.Server();
server.connection({
  port: 3001
});
 
function validate(request, credentials, callback) {
  if (credentials.user && credentials.userGroups) {
    callback(null, true, credentials);
  } else {
    callback(null, false);
  }
}
 
server.register([
  {
    register: require('hapi-sspi'),
    options: {
        authoritative: true,
        retrieveGroups: true,
        offerBasic: false,
        perRequestAuth: false
      }
  }
], (err) => {
  server.auth.strategy('windows', 'sspi', {validate});
 
  server.route({
    method: 'GET',
    path: '/',
    handler: function (req, reply) {
      reply({auth: req.auth});
    },
    config: {
      auth: 'windows'
    }
  });
 
  if (err) throw err;
  server.start((err) => {
    if (err) throw err;
  });
 
});

Options

Base options are the same as implemented in node-sspi plus a validate function that takes hapiRequest, credentials (user and userGroups if enabled), and a callback. The callback should be called with error, isValid, credentials object.

These values will be set on hapiRequest.auth.credentials.

You can set the options upon registration and/or setting of the strategy. The validate function is optional.

Notes

This will only work in Windows as restricted by node-sspi.

License

MIT as provided in LICENSE file