Developer-first Access Management.

// The presented developer experience is still in development.
// Low level SDKs exist and are documented.
const router = require('express')();
const ory = require('ory')()

router.post("/login", (req, res) => {
  if (req.body.username === 'test' && req.body.password === 'secret') {
    ory.consent().grant({
      subject: req.body.username,
      scopes: ['some', 'scopes']
    }, req)    
    return
  }
  
  res.send('Username and password are not correct');
});

{
  "matchesMethods": ["GET"],
  "matchesUrl": "http://mydomain.com/api/example",
  "mode": "anonymous"
}

$ hydra permissions add my-user some-permission
   
$ hydra permissions list my-user
{
  "subject": "my-user",
  "permissions": ["some-permission"]
}

$ hydra permissions remove my-user some-permission

const router = require('express')();
const ory = require('ory')
const middleware = ory().auth().createMiddleware()

router.get("/api/example",
  middleware,
  (req, res, next) => {
    res.json({
      message: "Yay! You're allowed to access this!",
      user: req.user
    });
  }
);