Good timing, we're just discussing filtering SocketIO events in #44 for 0.4.0 that will be released soon. It will probably look like this:

var TodoService = {
    remove: function(id, params, callback) {

    },

    update: function(id, data, params, callback) {

    },

    create: function(data, params, callback) {

    },

    removed: function(data, params, callback) {
        // e.g. restrict by data company id
        if(params.user.companyId !== data.companyId) {
            return callback(null, false);
        }

        callback(null, data);
    },

    updated: function(data, params, callback) {
        // restrict by data company id
        if(params.user.companyId !== data.companyId) {
            return callback(null, false);
        }

        // This will also allow to convert the data sent
        callback(null, { converted: data });
    },

    created: function(data, params, callback) {
        // TODO implement
    }
}

Where the created, updated and removed params will be the handshake data set during SocketIO authorization. The trickier part I think is a plugin that does shared authorization between Express and SocketIO also existing methods like this one should already work.

Uh oh!

Uh oh!

Preconditions in a service (Socket.IO) #48

Description

Activity

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions