You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I just did have short look at this github-project. You are adding "lib/iron-router-auth.js" on the client side. So a user only needs to comment some javascript lines and the routing would work without any restrictions.
Am I right?
Cheers,
Sebl
The text was updated successfully, but these errors were encountered:
This is not real authentication, it's more of a convenience package to either redirect or render something else depending on if the user is logged in or not, sure the user can comment some javascipt to access the "regular" template instead as if logged in, but the users wouldn't be logged in and if you secure your data the template should be empty or only filled with public data.
"user only needs to comment some javascript lines and the routing would work without any restrictions." - yes, that is all browser code. Security only exists in methods and publications.
Hi,
I just did have short look at this github-project. You are adding "lib/iron-router-auth.js" on the client side. So a user only needs to comment some javascript lines and the routing would work without any restrictions.
Am I right?
Cheers,
Sebl
The text was updated successfully, but these errors were encountered: