Guardian V1 Support about sentinel

[britton-jb]

Sounds great. Thanks for all of the hard work on Guardian.

[britton-jb]

@hassox Thanks for sending this my way. Very excited about the pipeline change. In a branch I'm working on accomplishing the same kind of functionality so seeing this is awesome.

The timing also works out well, as my lockable module was going to implement some breaking changes, so this will work nicely into the next version.

Supporting token types other than JWT

Just a lack of knowledge on my part, but can you give examples of that?

Everything else looks very straight forward, so I'll take a look at the docs and let you know if I have any other questions.

[hassox]

Hey @britton-jb

The new version allows multiple modules to be configured. As part of that, each module specifies a token_module. This module is setup as a behaviour (see Guardian.Token) So long as the token module conforms to the behaviour then it should be fine. The only type of token that Guardian supports out of the box is still JWT but this mechanism allows 3rd party token modules to be created. It's in response to some requests we've had. I have no current plans to implement another type of token but the possibility is there moving forward.

The most immediate use case of this functionality I think is to allow support for specific producers (like Auth0) although a full token module wouldn't be needed for that. Only a change to the verifier and a specific secret lookup.

We've tried to keep it as backward compatible as possible but still push though cleanup of various apis and the overall structure of the lib.

If you want hit me up on Slack and I'll try and answer any questions you have mate :)