Glossary: Web App Security and Authentication

requireUser

Also written: can, HttpError

kc-shop's access helpers: requireUser returns the signed-in user or throws 401, can checks a role's permission and denies unknown roles, and HttpError carries a status code for Fastify to reply with.