Good points. I'll fix the passKey issue. A given user can only read from their own db because each user has a unique username/password combo in _users. The user's db username/password is sent with each db request. All communications are over https.
On Thursday, March 6, 2014 9:58:49 AM UTC-8, Alan McKean wrote: > > I'm working on setting up a proxy server in Node.js that accepts the > incoming replication request and proxies it to the target CouchDB database. > I have two tiers of authentication. After getting the incoming request in > the Node.js proxy server, I want to authenticate the user by comparing > their login passKey with what I have on record. Is there a way to configure > the replication pull and push requests to send that first-tier passKey in > the body? The second tier of authentication is in the CouchDB username and > password that CouchDB handles. I suppose I could hack it by concatenating > the two usernames and passwords and parsing them in the Node.js server, but > I was hoping for a better way. > -- You received this message because you are subscribed to the Google Groups "Couchbase Mobile" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/mobile-couchbase/9bec39b0-ab42-4ce9-bae6-07e5f9f45586%40googlegroups.com. For more options, visit https://groups.google.com/groups/opt_out.
