DerbyJS and Authentication

Question

Does DerbyJS in current shape can implement authentication, if yes what's best way to do it? of not is their any work around to do it?

Answer 1

I'm very happy to share that Derby has released the first version of Access Control at the Racer level. Initial details are in the Racer package at https://github.com/codeparty/racer/blob/master/src/accessControl/README.md.

You track its ongoing progress with this github issue - https://github.com/codeparty/derby/issues/47#issuecomment-6337980

Answer 2

Use the derby-auth npm module: https://github.com/lefnire/derby-auth

Answer 3

No it does not yet, although the developers have said that it's one of the top things that they're working on. https://twitter.com/#!/derbyjs/status/194463304440221698

You might be able to build it in to your application, but at this point it doesn't really seem worth it. Unless you need it ASAP, I'd just wait until the developers officially release integrated auth.

Answer 4

You could simply use a reverse proxy to provide the security and https termination.

I'm currently trying NGINX.

Restrict the Derby server to listen on localhost and get NGINX to be the https terminator along with providing Basic Auth - or work up your own form-based login in Derby and keep NGINX as the https terminator/proxy.