Restricting bearer auth to route + HTTP verb?

[VirtualWolf]

Hi! I'm playing around with Hono on Cloudflare and it seems very slick, nice work. :) One thing I haven't been able to figure out is how to add bearer auth to a specific route and a specific HTTP verb combination. So say I have an API at /api/posts, I want all GET requests to be allowed, but only someone authorised via a bearer token should be able to make a POST requests to that endpoint.

Many thanks!

[yusukebe]

Hi @VirtualWolf !

You can write like the following:

app.get('/api/posts', (c) => {
  return c.text('Read Posts!')
})

app.post('/api/post', bearerAuth({ token: 'foo' }), (c) => {
  return c.text('Post Created!', 201)
})

[VirtualWolf]

Oohhhh, right! Amazing, thanks for the fast response! I think this'd be good to have as an example in the docs? Happy to raise a PR for it. :)

[yusukebe]

Happy to raise a PR for it.

Please :)

[VirtualWolf]

Done: honojs/website#29

[yusukebe]

Cool! Thanks!

[ghost]

[yusukebe]

@hclj37

Please create another issue.

[ghost]

Sorry, I created a new one here: https://github.com/orgs/honojs/discussions/809