scttnlsn/backbone.io — Issue #1: Backends should have access to socket
Author: scttnlsn
Created: 2011-12-01 21:12:01+00:00
State: open

Authorization should happen at the level of the backend since using Socket.IO's authorization mechanism does not offer enough granularity. As an example, consider a backend that allows anyone to read but only logged in users to create, update or delete. By providing the backend with a socket, it could optionally obtain the session ID and authorize the current operation.