Permissions

Lantern have already implemented permission mechanism, developer can just based on it to design own routing rules. The library which is called Middleware in the <APP PATH>/lib directory provides some methods to setup permissions.

Required Authorized

You may have a routing rule which is be able to be accessed for logged user only, using this way to setup constriction is good.

var Router = require('koa-router');
var Middleware = require('<APP PATH>/lib/middleware');

var router = new Router();
router.get('/foo/blah', Middleware.requireAuthorized, function *() {
    // Do something...
});

Allow Access

Allow access if the user who is granted specific permission.

var Router = require('koa-router');
var Middleware = require('<APP PATH>/lib/middleware');

var router = new Router();
router.get('/foo/blah', Middleware.allow('admin.access'), function *() {
    // Do something...
});