Download
Friend is an extensible authentication and authorization library for Clojure Ring web applications. It streamlines user authentication, supports multiple workflows, and integrates role-based security cleanly into request handling. Ring middlewares for configuring and defining the scopes of authentication and authorization. Macros to clearly demarcate the scope of authentication and authorization within code that is "below" the level of Ring handlers where you can't use middlewares. Enables DRY routes and configuration, e.g. no need to configure your routes in Compojure or Noir or Moustache, and separately specify which routes fall under the jurisdiction of Friend's security machinery.
Features
- Support for form-based, HTTP Basic, and OpenID authentication
- Pluggable workflows allow easy implementation of OAuth or custom methods
- Role-based authorization, optionally using Clojure’s hierarchy (derive, isa?)
- "su" capabilities—admin can impersonate other users for debugging
- Ring middleware and scoped macros simplify defining secure access flow
- Commonly used and considered stable in Clojure ecosystem
Project Samples
Categories
AuthenticationFollow Friend
Other Useful Business Software
Stop Storing Third-Party Tokens in Your Database
Rolling your own OAuth token storage can be a security liability. Token Vault securely stores access and refresh tokens from federated providers and handles exchange and renewal automatically. Connected accounts, refresh exchange, and privileged worker flows included.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of Friend!
