javascript - Faye: How to disable specific channel for publish by clients? -


oh, hi

i create chat app server written node.js , faye.

  1. clients subscribe /messages/new

  2. messages going way:

    client --[publish /messages]--> server side client --[publish /messages/new]--> clients

but if i'm anonymus h4x0r can edit client js file , make client publish messages not on /messages, on /messages/new. messages pass on server side client , go directly clients. want messages go via server side client, cause server magic: validates token, saves message in redis database , logs

question

how disable specific channel publish clients?

should write custom engine? didn't find channels configuration in faye server. let me know, if want see code, dunno show you.

note

createserver = ->     server = http.createserver()     server.listen settings.serverport      bayeux = new faye.nodeadapter        ##################################         mount: '/faye'                   # "server side client"         timeout: 45                      # lol     bayeux.attach server                 ##################################     fayeclient = bayeux.getclient()      log "listening on port #{settings.serverport}..."      return [fayeclient, bayeux]

edits

  • edit: rename "server" "server side client"
  • edit2: add note

damn, i'm dumb.

every message goes through server extensions, after send listeners (other clients).

  1. i added token server side client.
  2. check token in incoming extension
  3. if token incorrect, not propagate message (don't run callback).

my code:

incoming: (message, callback) ->     # validate, if message has been sent server     if message.channel == channels.newmessages  # /messages/new         # added token server side client         if message.data.token != settings.servertoken             return  # if message token incorrect, don't run callback      callback(message)  # send message listeners

Comments

Post a Comment

Popular posts from this blog

javascript - Jquery show_hide, what to add in order to make the page scroll to the bottom of the hidden field once button is clicked -

i have button on website when clicked, reveals map. button can seen when page first loads up, when clicked, section holding map slides open , goes out of screen since page loads @ top (normal). want page scroll down bottom of div select when button pushed, if map out of screen. if page scrolled down, , clicks show map button, don't want page jump bottom of map. i tried figure out myself, no luck. seasoned jquery coders able give me guidance? many thanks! map = mapdiv.gmap3("get"); infobox = new infobox({ pixeloffset: new google.maps.size(-220, -310), closeboxurl: '', enableeventpropagation: true }); mapdiv.delegate('.infobox .close','click',function () { infobox.close(); }); jquery(".slidingdiv").hide(); jquery(".show_hide").show(); jquery('.show_hide').click(function(){ lastcenter=map.getcenter(); jquery(".slidingdiv&quo
Read more

javascript - Highcharts multi-color line -

Image
i looking create highchart multi-colored line. if goes down under value, become red, , when comes on value, become green . here picture example: or maybe highcharts have other charts models differentiate high or low level color? you can achieve coloring using lineargradient coloring: color: { lineargradient: { x1: 0, x2: 0, y1: 0, y2: 1 }, stops: [ [0, 'red'], [0.25, 'yellow'], [0.50, 'green'], [0.75, 'yellow'], [1, 'red'] ] } here 0 in stops relates minimum value of series , 1 maximum value, , in between percentages between values. if find percentages according values prior creating chart use correct stops values make relate specific values in data (at least approximately). see this jsfiddle example .
Read more

javascript - Enter key does not work in search box -

tried search guys sorry. input in search box doesnt work (or search) when hit enter when user clicks search button. doing wrong? here code. thanks. <script type="text/javascript"> $(document).ready(function() { $("#submit").click(function() { var url = "http://asla.org/awardssearch.html"; url += "?s=" + $('#googlecse').val(); window.location = url; }); $('#googlecse').keydown(function(event) { if (event.keycode == '13') { $("#submit").click(); } else { //do nothing :) } }); }); </script> <form class="navbar-form navbar-right" role="search"> <div class="search"> <input id="googlecse" type="text" onblur="if(this.value=='')this.value=this.defaultvalue;" onfocus="if(this.value==this.defaultvalue)t
Read more