Reputation: 61
I am developing a chrome app and i am using indexedDB as a database. I would like to know how to lock the database so that unauthorized user will not be able to see the database data but when the user enter userId and password for the database it should allow user to access it.
Upvotes: 1
Views: 1957
Reputation: 13131
IndexedDB respects single origin policy and other web site / app will not access your site data.
For your concern, confidential data must NOT available until user login for the first time. After that, it is OK to keep confidential data in the web app. You may also want to encrypt using client side encryption for some data.
Upvotes: 1