5. Securing Your Data | Socket.IO Cookbook

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Socket.IO Cookbook

By : Tyson Cadenhead

3.3 (6)

Socket.IO Cookbook

3.3 (6)

By: Tyson Cadenhead

Overview of this book

Socket.IO is a JavaScript library that provides you with the ability to implement real-time analytics, binary streaming, instant messaging, and document collaboration. It has two parts: a client-side library that runs in the browser, and a server-side library for node.js. Socket.IO is event-driven and primarily uses the WebSocket protocol that allows us to emit data bi-directionally from the server and the client. Socket.IO This book is a complete resource, covering topics from webSocket security to scaling the server-side of a Socket.IO application and everything in between. This book will provide real-world examples of how secure bi-directional, full-duplex connections that can be created using Socket.IO for different environments. It will also explain how the connection vulnerabilities can be resolved for large numbers of users and huge amounts of data/messages. By the end of the book, you will be a competent Socket.IO developer. With the help of the examples and real-world solutions,you will learn to create fast, scalable, and dynamic real-time apps by creating efficient messaging systems between the server side and the client side using Socket.IO.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Conventions

Reader feedback

Customer support

Free Chapter

1. Wiring It Up

1. Wiring It Up

Introduction

Creating a Node HTTP server with Socket.IO

Creating an Express server with Socket.IO

Using Socket.IO as a cross-browser WebSocket

Debugging on the client

Debugging on the server

2. Creating Real-Time Dashboards

2. Creating Real-Time Dashboards

Introduction

Loading static data from the server

Creating a server-side clock

Loading data from MongoDB

Real-time analytics

Handling connection timeouts

3. Having Two-Way Conversations

3. Having Two-Way Conversations

Introduction

Creating a simple chat room

Managing the socket life cycle

Emitting a private message to another socket

Sending messages to all the sockets, except for the sender

Building a multiplayer tic-tac-toe game

4. Building a Room with a View

4. Building a Room with a View

Introduction

Creating chat channels with namespaces

Joining rooms

Leaving rooms

Listing rooms the socket is in

Creating private rooms

Setting up a default room

5. Securing Your Data

5. Securing Your Data

Introduction

Implementing basic authentication

Performing token-based authentication

Handling server-side validation

Locking down the HTTP referrer

Using secure WebSockets

6. Performing a Load Balancing Act

6. Performing a Load Balancing Act

Introduction

Performing load balancing with the Nginx server

Using the Node.js cluster

Using Redis to pass events between nodes

Using Memcached to manage multiple nodes

Using RabbitMQ to message events across nodes

7. Streaming Binary Data

7. Streaming Binary Data

Introduction

Broadcasting an image to other sockets

Uploading an image to the filesystem

Uploading an image to Amazon S3

Streaming audio

Streaming live video

8. Integrating with Mobile Applications

8. Integrating with Mobile Applications

Introduction

Throwing an alert when the socket connects

Pushing up data from the server

Responding to tap events from the device

Doing server-side pagination

Triggering hot deploys

Index

Index

Performing token-based authentication

Now that we are able to perform basic authentication with Socket.IO, let's take a look at a token-based approach that handles authentication more securely, such as JSON Web Tokens, or JWT.

JSON Web Tokens are an URL-safe means of representing claims to be transferred between two parties. The claims in a JSON Web Token are encoded as a JSON object that is digitally signed using JSON Web Signature. With this approach, we can securely send a salted web token to the client to use on subsequent requests.

Getting ready

For this recipe, we will use the jsonwebtokennpm package to create secure JSON Web Tokens. The package can be installed by running npm install jsonwebtoken –save in your terminal.

How to do it…

To perform token-based authentication, follow these steps:

First, let's create our server and expose the events of Socket.IO to authenticate and receive a JSON Web Token. In this example, we will hardcode a profile to be associated with the JWT, but you would...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Socket.IO Cookbook

Search

Your notes and bookmarks