auth.rb

require 'neo_classes'
require 'bcrypt'


#Throws a 401 if the provided credentials don't match at least one of the enumerated users.
def protected!(user_ids)
  unless user_ids.any? {|user_id| authorized?(user_id) }
    response['WWW-Authenticate'] = %(Basic realm="You may have mistyped your username or password. You can either retype them here or hit ESC twice.")
    throw(:halt, [401, "Not authorized\n"])
  end
end

def authorized?(user_id)
  user_creds = User.creds_from_id(user_id)
  @auth ||=  Rack::Auth::Basic::Request.new(request.env)
  @auth.provided? && @auth.basic? && @auth.credentials && user_creds == @auth.credentials
end

def authed_user(user_ids)
  user = user_ids.detect {|uid| authorized?(uid)}
end