Authentication using token and user-password

[crackytsi]

Hi,
I try to authenticate admins based on a header variable (with Nodered 1.1.3). If a token is present i query the LDAP for authentication. If in LDAP the user is not authorized, I resolve the user to null.

Actually in this case, I want to offer user/Password based authentication. But the user/password dialog is here no longer present, so I can only see the logo in the left corner, the header and the rest is blank.

Is this way of failover-authentication even possible? Is resolve user to null the correct way or how can I return with the token function that user/password authentication is tried?

[crackytsi]

@knolleary Hey Nick, can you take a look on this topic and give me a little hint?

[knolleary]

How exactly have you got adminAuth configured?

[crackytsi]

I have a configuration like this (I tried to trivialize it a little):

module.exports = {
   type: "credentials",
   users: function(username) {
       return new Promise(function(resolve) {
           // Do whatever work is needed to check username is a valid
           // user.
           if (valid) {
               // Resolve with the user object. It must contain
               // properties 'username' and 'permissions'
               var user = { username: "admin", permissions: "*" };
               resolve(user);
           } else {
               // Resolve with null to indicate this user does not exist
               resolve(null);
           }
       });
   },
   authenticate: function(username,password) {
       return new Promise(function(resolve) {
           // Do whatever work is needed to validate the username/password
           // combination.
           if (valid) {
               // Resolve with the user object. Equivalent to having
               // called users(username);
               var user = { username: "admin", permissions: "*" };
               resolve(user);
           } else {
               // Resolve with null to indicate the username/password pair
               // were not valid.
               resolve(null);
           }
       });
   },
   default: function() {
        return when.promise(function(resolve) {
            // Resolve with the user object for the default user.
            resolve({anonymous: true, permissions:"read"});
        });
   },
   tokenHeader: "RVUSER",
   tokens: function(token) {
        return new Promise(function(resolve, reject) {
            // Do whatever work is needed to check token is valid
            if (valid) {
                // Resolve with the user object. It must contain
                // properties 'username' and 'permissions'
                var user = { username: 'admin', permissions: '*' };
                resolve(user);
            } else {
                // Resolve with null as this user does not exist
				// We expect that user-password instead is tried
                resolve(null);
            }
        });
   } 
}