model decorators from tapestry-security
https://github.com/tynamo/tapestry-security
tapestry security was written in JAVA based on shiro framework construct ACEGI security framework was its initial base implementation but it was ported to shiro thereafter A new node.js base framework to mimic acegi/shiro can be implemented its just triggers configs and interceptors... here is a meek attempt https://github.com/gnavarro77/angular-shiro
tapestry security models the following o authentication o authorization o roles o permissions
and its ripe for porting to typescript it was all done using java annotations or just grab those decorators and implement them for node with a base eFrastructure
since decorators are reality in typescript now this module can be a reference and the annotations modeled as decorators in node.js typescript and your backend/frontend app can just use the new decorators
Its a great reference to work from
WHY?
general security flow is fluid o user security authentcation/authorization o can model roles and permissions o instance based security on business objects o property based security on business object properties
that's about as tight as it gets given underlying encryption options
Its just a best practice codebase suggestion
I reviewed the security tutorialss and demos and sadly everything is still all over the place But it all goes back to the big bang... when one python developer punched a hole thru the middle tier and said... "hey! look what I can do" and the mess ensued