Security News
38% of CISOs Fear They’re Not Moving Fast Enough on AI
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
@stanlemon/react-couchdb-authentication
Advanced tools
React component for authenticating against a CouchDB user db and syncing it locally with PouchDB.
React component for streamlining user authentication against an Apache CouchDB instance. If you're building a React application and want to let the amazing CouchDB be your backend, you can take advantage of CouchDB's userdb feature, and with this component streamline using CouchDB to sign up and login users to a secure application. Each user's database is replicated locally to a PouchDB instance that you can use to wrok with documents.
First add the component to your application. You should also have React and PouchDB installed.
npm install --save @stanlemon/react-couchdb-authentication pouchdb react
You will need an instance of CouchDB. If you don't have one, the CouchDB install docs will take care of you.
In your CouchDB config you will need to enable couch_user.enable
and couch_user.delete_dbs
. You can do this through Fauxton, CouchDB's excellent UI or with the following commands:
curl -X PUT localhost:5984/_node/_local/_config/couch_peruser/enable -d "\"true\""
curl -X PUT localhost:5984/_node/_local/_config/couch_peruser/delete_dbs -d "\"true\""
Enabling these settings ensures that once a user signs up, their dedicated database is setup (and vice versa when their user is deleted).
You will also need to ensure that the _user database is created and can be written to by any user. Note that the security of this database changed in CouchDB 3, so it's not open by default anymore.
It is highly recommended that you setup a proxy to your couchdb instance so that your webapp and the instance can be accessed through the same domain. That is how the example app works.
The <Authentication/>
component is easy to use, simply wrap your <App />
and use the provided <Login />
and <SignUp />
components to get going. You can customize your login and signup views later.
<Authentication
url="http://localhost:5984"
login={<Login />}
signup={<SignUp />}
>
<h1>Authenticated!</h1>
</Authentication>
Want an easier way to see this in action? Clone the repository, and checkout the example folder. You can run npm start
inside of it and see a fully functioning implementation of the components.
The <Login />
and <SignUp />
components are actually containers that provide some simple setters that are supplied to a view via the component
property, which you can customize to look appropriate for your application.
Most issues are due to CouchDB being misconfigured, or cookies already being set. If you've pulled up Fauxton in your browser you will want to clear the cookies for your CouchDB instance before using this component.
This component has a fair amount of logging that can give you better insight into it's behavior. To see that logging you can set debug={true}
on the <Authentication/>
component and everything will be logged out to the console. Do not do this in production!
To get started, you can build the components using Typescript by simply doing:
npm install
npm run build
You can lint the source by doing:
npm run lint
You can run tests by doing:
npm test
Tests require a working CouchDB instance.
FAQs
React component for authenticating against a CouchDB user db and syncing it locally with PouchDB.
The npm package @stanlemon/react-couchdb-authentication receives a total of 272 weekly downloads. As such, @stanlemon/react-couchdb-authentication popularity was classified as not popular.
We found that @stanlemon/react-couchdb-authentication demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.
Security News
Company News
Socket is joining TC54 to help develop standards for software supply chain security, contributing to the evolution of SBOMs, CycloneDX, and Package URL specifications.