feat: provide a custom error message or redirect

[atinux]

I like the simple redirect of passport.js.

passport.authenticate('local', {
  successRedirect: '/',
  failureRedirect: '/login'
})

[atinux]

I also like the API of having first param for provider:

From:

createAuthMiddleware({
  provider: 'basic',
  providerOptions: { username: 'test', password: 'test' }
})

To:

createAuthMiddleware('basic', {
  username: 'test',
  password: 'test'
})

[pi0]

Dealing with redirects might start to make usage tricky since goal of this package is to secure pages in simplest possible way not a full featured authentication system that passport provides. (there is no login page. Every route matching middleware needs auth)

[atinux]

Yes I fully agree on the simplicity of it.

Could we at least give a way to the user a way to render a specific response (ex: rendering a HTML document to explain why he does not have access)

createAuthMiddleware({
  enabled: process.env.NODE_ENV === 'production',
  provider: 'github',
  providerOptions: {
    clientId: 'id',
    clientSecret: 'secret'
  },
  sessionSecret: 'secret',
  message: fs.readFileSync('error.html')
})

[pi0]

• Added support for unauthorizedTemplate
• Provider options are now flattened