Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Client-side authentication? #16

Open
Sebl29 opened this issue Jul 21, 2014 · 2 comments
Open

Client-side authentication? #16

Sebl29 opened this issue Jul 21, 2014 · 2 comments

Comments

@Sebl29
Copy link

Sebl29 commented Jul 21, 2014

Hi,

I just did have short look at this github-project. You are adding "lib/iron-router-auth.js" on the client side. So a user only needs to comment some javascript lines and the routing would work without any restrictions.
Am I right?
Cheers,
Sebl

@zimme
Copy link
Contributor

zimme commented Jul 28, 2014

This is not real authentication, it's more of a convenience package to either redirect or render something else depending on if the user is logged in or not, sure the user can comment some javascipt to access the "regular" template instead as if logged in, but the users wouldn't be logged in and if you secure your data the template should be empty or only filled with public data.

@xpressivecode, correct me if i'm wrong

@MichaelJCole
Copy link

"user only needs to comment some javascript lines and the routing would work without any restrictions." - yes, that is all browser code. Security only exists in methods and publications.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants