creating authorization skeleton + fetching some API env variables

lib/api3/authBuilder.js

@@ -0,0 +1,16 @@
+'use strict';
+
+function configure (env, ctx) {
+
+  function authBuilder (permission) {
+
+    return function authorize (req, res, next) {
+
+      res.sendJSONStatus(res, 401, 'Missing access token or JWT');
+    }
+  }
+
+  return authBuilder;
+}
+
+module.exports = configure;

lib/api3/const.json

@@ -1,3 +1,5 @@
 {
-  "API3_VERSION": "3.0.0-alpha"
+  "API3_VERSION": "3.0.0-alpha",
+  "API3_SECURITY_ENABLE": true,
+  "API3_TIME_SKEW_TOLERANCE": 5
 }

lib/api3/index.js

@@ -1,23 +1,63 @@
 'use strict';
 
-function create(env, ctx) {
-  var _ = require('lodash')
-    , express = require('express')
-    , app = express()
-    , apiConst = require('./const.json')
+function setENVTruthy (app, varName, defaultValue) {
+  //for some reason Azure uses this prefix, maybe there is a good reason
+  var value = process.env['CUSTOMCONNSTR_' + varName]
+    || process.env['CUSTOMCONNSTR_' + varName.toLowerCase()]
+    || process.env[varName]
+    || process.env[varName.toLowerCase()];
+
+  value = value != null ? value : defaultValue;
+
+  if (typeof value === 'string' && (value.toLowerCase() === 'on' || value.toLowerCase() === 'true')) { value = true; }
+  if (typeof value === 'string' && (value.toLowerCase() === 'off' || value.toLowerCase() === 'false')) { value = false; }
+
+  app.set(varName, value);
+}
+
+
+function setupApiEnvironment (app, env) {
+  var apiConst = require('./const.json')
 
-  var wares = require('../middleware/')(env);
   app.set('name', env.name);
   app.set('version', env.version);
   app.set('apiVersion', apiConst.API3_VERSION);
   app.set('units', env.DISPLAY_UNITS);
 
+  // we don't need these here
+  app.set('x-powered-by', false);
+  app.set('etag', false);
+
+  setENVTruthy(app, 'API3_SECURITY_ENABLE', apiConst.API3_SECURITY_ENABLE);
+  setENVTruthy(app, 'API3_TIME_SKEW_TOLERANCE', apiConst.API3_TIME_SKEW_TOLERANCE);
+  setENVTruthy(app, 'API3_DEDUP_FALLBACK_ENABLED', apiConst.API3_DEDUP_FALLBACK_ENABLED);
+}
+
+
+function setupApiRoutes (app, env, ctx) {
+  var wares = require('../middleware/')(env)
+    , authBuilder = require('./authBuilder')(env, ctx)
+
   app.get('/swagger.yaml', function getSwagger (req, res) {
     res.sendFile(__dirname + '/swagger.yaml');
   });
 
   app.get('/version', require('./version')(app, wares, env, ctx));
 
+  app.get('/test', wares.sendJSONStatus, authBuilder('api:entries:read'), function test (req, res) {
+    res.status(200).end();
+  });
+}
+
+
+function create (env, ctx) {
+  var express = require('express')
+    , app = express()
+
+  setupApiEnvironment(app, env);
+
+  setupApiRoutes(app, env, ctx);
+
   return app;
 }
 

lib/api3/version.js

@@ -4,7 +4,7 @@ function configure (app, wares, env, ctx) {
   var express = require('express'),
     api = express.Router( )
 
-  api.get('/version', function (req, res) {
+  api.get('/version', function getVersion (req, res) {
     var date = new Date();
     var info = { version: app.get('version')
       , apiVersion: app.get('apiVersion')