CODEWITHSUNDEEP
node.jsmobileibm-cloud
Raymond Camden
Raymond Camden

Reputation: 10857

Mobile Application Security, Bluemix, and Node.js apps

In looking at the Node.js boilerplate app you get with a Bluemix application, there is a package called IBMSecurity. It seems to imply that by merely putting some routes after it, those routes will require a tokenized call from your mobile app.

//uncomment below code to protect endpoints created afterwards by MAS
var mas = require('ibmsecurity')();
app.use(mas);

Is this accurate? If you read the docs here, http://mbaas-gettingstarted.ng.bluemix.net/node#get-started-with-security, it says it locks down everything, not the routes after it. So it appears to be a bit unclear. If support for both is there, it should be mentioned in the docs as it makes the feature more appealing if you can pick and choose which routes are locked down.

Upvotes: 2

Views: 78

Answers (1)

Kamaganahally Jaganatha
Kamaganahally Jaganatha

Reputation: 347

@Raymond Camden, if you are asking that the doc section http://mbaas-gettingstarted.ng.bluemix.net/node#get-started-with-security describes method to enable application security using authentication, then it is right. I am reading from you question '... says it locks down everything, not the routes after it. So it appears to be a bit unclear. ...'. I do not read anything like that in the doc. Can you please clarify what section/paragraph you are reading that implies it locks down everything?

Upvotes: 2

Related Questions