Restricting bearer auth to route + HTTP verb? #793

VirtualWolf · 2023-01-09T09:48:12Z

VirtualWolf
Jan 9, 2023

Hi! I'm playing around with Hono on Cloudflare and it seems very slick, nice work. :) One thing I haven't been able to figure out is how to add bearer auth to a specific route and a specific HTTP verb combination. So say I have an API at /api/posts, I want all GET requests to be allowed, but only someone authorised via a bearer token should be able to make a POST requests to that endpoint.

Many thanks!

Answered by yusukebe

Jan 9, 2023

Hi @VirtualWolf !

You can write like the following:

app.get('/api/posts', (c) => {
  return c.text('Read Posts!')
})

app.post('/api/post', bearerAuth({ token: 'foo' }), (c) => {
  return c.text('Post Created!', 201)
})

View full answer

yusukebe · 2023-01-09T23:33:08Z

yusukebe
Jan 9, 2023
Maintainer

Hi @VirtualWolf !

You can write like the following:

app.get('/api/posts', (c) => {
  return c.text('Read Posts!')
})

app.post('/api/post', bearerAuth({ token: 'foo' }), (c) => {
  return c.text('Post Created!', 201)
})