search

bower / registry

The Bower registry
https://registry.bower.io/packages
MIT License
292 stars 66 forks source link

Use CouchDB's '_users' DB to store users #35

Closed svnlto closed 11 years ago

svnlto commented 11 years ago

Currently, all users are being stored in the 'bower-registry' database. I'd like to stick to CouchDB's convention of storing users in '_users'.

The registry currently doesn't support multiple DB's right now which is something we should add.

wibblymat commented 11 years ago

I originally thought we should do this, but now I disagree. The _users database is designed for CouchDB users and as such gives certain permissions on the database itself to each user we create. While we would lock down the port to only be accessible locally, this still seems like an unnecessary security hole.

It also doesn't gain us much in terms of ease of use. We'd have to proxy requests between the client and the database in order to do authentication which is just as messy as doing authentication ourselves.

svnlto commented 11 years ago

+1