Hello Folks, It's me again, with another rather stupid question. Shame on me :no_mouth: How do I connect to a sqlite (node-red-node-sqlite) from within the security.js file? Or do I have to send a message with uibuilder.send()? If I have to do so, how do I wait in the userValidate function for the…

[image] amitsinghio: another rather stupid question No such thing as a stupid question - though plenty of stupid answers :anguished: And in this case, certainly not stupid, a very reasonable question in fact. To use SQLlite or any other DB in security.js, you just need to remember that secu…

I tried to store usernames and passwords in a sqlite database named Users.db with the columns name, password, salt and scope and use this for validation in security.js. Works fine. I used better-sqlite3 (install with npm install better-sqlite3, see better-sqlite3 - npm ) /* globals module */ /** *…

Cool. Though you need to validate the _auth.id because you are passing it straight into your SQL query and you haven't included surrounding quotes in the query parameter. I would make sure that the id is a valid string, not an empty string, not more than nn chars (choose a reasonable limit) and do…

By the way, if uibuilder security isn't quite ready for you, you should try using an external proxy such as Caddy or NGINX which have mature authentication and authorisation configs.

Node-RED

Node-RED Forum

Uibuilder sqlite security.js

General

Topic		Replies	Views
Uibuilder security General	2	872	27 July 2021
Uibuilder: Security Proposal Developing Nodes uibuilder	17	2334	14 May 2020
Uibuilder Security.js General	26	1994	3 May 2021
Uibuilder security with MS-SQL General uibuilder	6	570	16 September 2021
[Update on progress] node-red-contrib-uibuilder vNext/v5 Share Your Nodes uibuilder	5	1147	17 February 2022

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Uibuilder sqlite security.js

Related topics