Within previously published tutorials, you’ve learned how to authenticate users with GitHub and GitLab. Both guides walk you through the details on how to integrate a third party service with your hapi server, but don’t show you how to combine the user’s profile data from that service …

Securing routes with authentication mechanisms is a common way to allow only selected people access to a given resource. If you’re tired of implementing boilerplate code for login and signup again, benefit from hapi’s powerful plugin system and integrate with third-party services to leverage OAuth access. This tutorial …

OAuth is a convenient authentication mechanism where users grant access to their account for a selected application. You as a developer can benefit from an authentication token that allows you to access the service on your users behalf. With OAuth you can connect services and build convenient integrations for your …

While developing your application, you might want to secure resources with authentication. Creating your own sign up and log in flow is boilerplate code you want to avoid. At this point, you can benefit from authentication mechanisms like OAuth. With OAuth you can integrate with another platform and users allow …

Validations are built into hapi’s core and the framework has first class support for Joi, the schema validation framework. The overall validation setup for individual routes is very convenient and expressive, you’ll see that in a minute. The default behavior for failed validations is to send proper error …

For web based applications, there are various authentication mechanisms available. To let your hapi server support a selected one, pick a plugin from the hapi ecosystem, provide the required configuration and you’re ready to go. At some point, most of us hapi developers trap into an unknown authentication strategy …

Scopes in hapi can be used to set up and implement basic access restriction. The linked tutorial provides the details if you want to get started with scopes. This tutorial shows you how to take scopes to the next level by using dynamic request properties like query or path parameters …

In an advanced development state, you want to make use of request headers and because you don’t blindly trust the incoming values, you also apply validation rules. With hapi, you’ve a framework that has validation built into its core and makes it easy to define rules for request …