elt547
Does authorizing the mount protect the event handlers?
If I authorize users inside the mount function of a liveview, does that protect the event handlers as well? For example if I redirect inside of a mount function, will that disallow access to the event handlers over the socket connection?
First Post!
jerdew
If I understand right, you want to read: Security considerations of the LiveView model — Phoenix LiveView v0.17.11 in full.
Permissions might change while someone is logged in, so on mount may not be enough. There are 3 places you might secure: mount/on_mount, each handle_event, and when permissions change you can disconnect all the affected user forcing them to log in again. The above docs will hopefully help you decide based on your circumstances.
Popular in Questions
Other popular topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Supporting innovation across the BEAM ecosystem.
Categories:
Sub Categories:
Forums
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Practical resources that improve the lives of professional developers.
Develop your skills with books, videos, and courses.
Producing high quality Elixir screencasts since 2017.
Courses that'll move you from confusion to "Aha, now I get it!"