Authentication and Authorization Flow

Bookshop auth flow

The bookshop application consists of two distinct user types, which are the normal users and admin users. The sample application in the last lesson showed how to implement an authentication and authorization flow in a Meteor application using the accounts-password package for authentication and alanning:roles for authorization of web-application users.

The accounts-password package allows for the creation of a user by either using a username and a password or a username and an email with a password. The bookshop application creates new users through a sign-up form in which users can sign up with an email and a password. Users created with the signup form are given the role of a normal user at account creation.