How to use the UnauthorizedError function from restify

employee.controller.js

GitHub: microsoft/developer-immersion-data

44
45
46
47
48
49
50
51
52
}

return employeeQueryService.getEmployeeByUserName(req.user.email).then(function (employee) {

    if (employeeId === employee.id) {
        res.send(new restify.UnauthorizedError());
        next();
        return;
    }

69

95

21

errors.js

GitHub: TritonDataCenter/sdc-docker

147
148
149
150
151
152
153
154
155
156
 * response body (because the `docker` CLI prints that body) and (b) always
 * have that body be "Unauthorized" to not accidentally leak auth details.
 */
function UnauthorizedError(cause) {
    if (cause) {
        restify.UnauthorizedError.call(this, cause, 'Unauthorized');
    } else {
        restify.UnauthorizedError.call(this, 'Unauthorized');
    }
}

49

182

65

+ 3 other calls in file

kartlytics.js

GitHub: davepacheco/kartlytics

157
158
159
160
161
162
163
164
165
166
                next();
                return;
        }

        response.header('WWW-authenticate', 'Basic realm="kartlytics"');
        next(new mod_restify.UnauthorizedError());
        response.end();
}

/*

8

77

12

+ 3 other calls in file

user.js

GitHub: diamondpkg/registry

121
122
123
124
125
126
127
128
129
130
router.post('/user/login', async (req, res) => {
  if (!req.params.username || !req.params.password) return res.send(new restify.BadRequestError('Missing username and/or password'));

  const user = await User.findById(req.params.username);
  if (!user) return res.send(new restify.UnauthorizedError('Unauthorized'));
  if (!user.get('verified')) return res.send(new restify.UnauthorizedError('Unauthorized'));

  bcrypt.compare(req.params.password, user.get('password'), (err, match) => {
    if (err) return res.send(new restify.InternalServerError('Internal server error'));
    if (!match) return res.send(new restify.UnauthorizedError('Unauthorized'));

0

1

2

+ 5 other calls in file

errors.js

GitHub: TritonDataCenter/sdc-imgapi

594
595
596
597
598
599
600
601
602
603
} else if (err.name === 'NotFoundError') {
    // Docker registry client image not found error.
    return new restify.ResourceNotFoundError(err, errMsg);
} else if (err.name === 'UnauthorizedError') {
    // Docker registry client unauthorized error.
    return new restify.UnauthorizedError(err, errMsg);
} else {
    // Unexpected error - wrap it into an internal error.
    return new restify.InternalError(err, errMsg);
}

17

5

0

auth.js

GitHub: j12y/content-service

11
12
13
14
15
16
17
18
19
20
 * @description Extract an API key from a request's parsed Authorization header. Emit an error if
 *  no such header is present, or if it's not formed correctly.
 */
var parseAuth = function (auth, callback) {
  if (!auth || !Object.keys(auth).length) {
    return callback(new restify.UnauthorizedError('An API key is required for this endpoint.'));
  }

  if (auth.scheme !== 'deconst') {
    return callback(new restify.InvalidHeaderError('Your Authorization header specifies an incorrect scheme.'));

9

0

1

+ 5 other calls in file

currentOrganization.js

GitHub: eoko/api-utils

6
7
8
9
10
11
12
13
14
15
return function curOrganization(req, res, next) {
  assert.equal(typeof req, 'object', 'req must be an object of group');
  assert.equal(Array.isArray(req.organizations), true, 'req.organization must be an array');

  if (!req.organizations.includes(req.params[param])) {
    throw new restify.UnauthorizedError(`No organization for field ${param}`);
  }

  req.currentOrganization = req.params[param]; // eslint-disable-line no-param-reassign
  return next();

0

0

3