Node.js based Authentication & Authorisation framework? -

searching such framework results in passport.js think authentication.

in php world, there sentry cartalyst

• authentication
• authorisation (groups)
• list item
• user activation
• password resetting
• throttling

is node.js not mature enough have such full-fledged open source framework?

node.js built upon modules, built upon modules, etc. frameworks in normal sense don't exist. instead, have starting points applications, called generators, , have modules implement functionality. generators of course not required, can instead start scratch.

there few modules feel frameworks, @ end of day they're part of whole, module, extends existing module. express great example of that. wraps http.server , handles request callback you, allowing chain callbacks onto single request callback (called middleware) result in responding client data (through routing).

but, express routing. doesn't templating, emails, db work, authentication, data modeling, nothing. has added middleware, , done using existing modules implement functionality.

now, generators. popular generator out there express express generator, however, comes express, few essential pieces of middleware, error handling, , templating engine. you're left task of installing , implementing other parts of application (such authentication) yourself. normal node.js. @ point need decide need app, how want implemented, , find modules accomplish goals (or write modules yourself, because times 1 doesn't exist precisely want.)

---

i said wouldn't this, but, loopback module , generator (the loopback devs call framework, call generator, whatever) builds express app (wrapped in loopback module), has of things looking built-in. don't use because feel much. when application built it, felt uncomfortable not knowing how majority of application worked, because didn't build it, plugged in data. saved time front, when came doing custom work wasn't supported out of box, became time consuming.