Edit on GitHub

File-based authentication

File-based authentication allows you to store usernames, passwords or password hashes and optional meta-data in a file that will be used to authenticate incoming connections.

File-based authentication is a good choice for scenarios with smaller amounts of connections that need authenticating, e.g. publicly readable realtime dashboards with a small number of provider processes delivering the data.

Using file-based authentication

To enable authentication to a deepstream server with user credentials stored in a local file, set the type key to file in the auth section of the server's configuration file.

  type: file
    path: ./users.json
    hash: 'sha256'
    iterations: 65536
    keyLength: 32

The path key contains a path to the file relative to the config file, that defines your users and passwords. By default this is the users.yml file that comes with deepstream, but the name or location is up to you.

In the hash key add the hashing algorithm to hash the passwords, for example, using sha256 (or any other algorithm supported by your operating system). The iterations key sets how many times the algorithm should was applied to the user's password, and keyLength the length of the key generated. These should match how you hashed the passwords.

In the users file, create a list of your users and their hashed passwords (you can create hashes with your setting using deepstreams hash command).

You also have the option to specify:

  • clientData – user data you want to be sent to the client upon successful login,
  • serverData – user data you want to be sent to permissioning.
  password: tsA+ks76hGGSGHF8**/JHGusy78=75KQ2Mzm
    favorite color: blue
    department: admin

  password: jhdGHJ7&0-9)GGSGHF8**/JHGusy78sjHJ&78
    favorite color: red
    department: finance

Start the deepstream server and you should see the authentication type confirmed.

deepstream starting with file authentication

In your application code you can now connect to the deepstream server and try to login a user.

const deepstream = require('deepstream.io-client-js')
const client = deepstream('localhost:6021')

  username: 'chris',
  password: 'password' // NEEDS TO BE REAL

If a success, the deepstream console will show:

Authentication success

And if a failure:

Authentication failure

You can then handle the outcome of the login request in your JavaScript code, for example:

  username: 'chris',
  password: 'password' // NEEDS TO BE REAL
}, (success, data) => {
  if (success === true) {
    // Handle a successful login
  } else {
    // Handle an incorrect login, the errorCode is available
Need support, architectural consulting or training? Buy Support