Question

Working on my first EmberJS app. The entire app requires that a user be logged in. I’m trying to wrap my head around the best way to enforce that a user is logged in now (when the page is initially loaded) and in the future (when user is logged out and there is no refresh).

I have the user authentication hooks handled – right now I have an ember-data model and associated store that connects that handles authorizing a user and creating a user “session” (using sessionStorage).

What I don’t know how to do is enforce that a user is authenticated when transitioning across routes, including the initial transition in the root route. Where do I put this logic? If I have an authentication statemanager, how do I hook that in to the routes? Should I have an auth route that is outside of the root routes?

Note: let me know if this question is poorly worded or I need to explain anything better, I will be glad to do so.

Edit:
I ended up doing something that I consider a little more ember-esque, albeit possibly a messy implementation. I have an auth statemanager that stores the current user’s authentication key, as well as the current state.

Whenever something needs authentication, it simply asks the authmanager for it and passes a callback function to run with the authentication key. If the user isn’t logged in, it pulls up a login form, holding off the callback function until the user logs in.

Here’s some select portions of the code I’m using. Needs cleaning up, and I left out some stuff. http://gist.github.com/3741751

Answer 1

If you need to perform a check before initial state transition, there is a special function on the Ember.Application class called deferReadiness(). The comment from the source code:

By default, the router will begin trying to translate the current URL into
application state once the browser emits the DOMContentReady event. If you
need to defer routing, you can call the application’s deferReadiness() method.
Once routing can begin, call the advanceReadiness() method.

Note that at the time of writing this function is available only in ember-latest