[Question] Can we prevent specific sessions from registering RPCs?

voryx / Thruway

PHP Client and Router Library for Autobahn and WAMP (Web Application Messaging Protocol) for Real-Time Application Messaging

MIT License

676 stars 117 forks source link

[Question] Can we prevent specific sessions from registering RPCs? #352

Closed Ethorsen closed 3 years ago

Ethorsen commented 3 years ago

Might be a simple question, might not.

I want to prevent any session from the outside world from registering RPCs, and only allow it on my trusted clients.

It feels like our AuthProviderClient should be able to set the permissions of an authenticated session. Some booleans that we could set on the session, like

canRegister
canCall
canPublish
canSubscribe

Something that can be done with Thruway?

Thx

mbonneau commented 3 years ago

@Ethorsen Check out here: http://voryx.net/authorization-permissions-with-thruway/

Let me know if that helps.

Ethorsen commented 3 years ago

Yes thank you this is exactly it