Parse launches JavaScript SDK: Parse for Websites

#1

Post by jamesjyu » Wed, May 30, 2012, 4:23 PM UTC

Parse launches JavaScript SDK: Parse for Websites
blog.parse.com

Re: Parse launches JavaScript SDK: Parse for Websites

#2

Post by taylorbuley » Wed, May 30, 2012, 4:44 PM UTC

Can anyone explain to me how authentication works with JS-based storage client like this?

It scares me to think a user might have the ability to store anything via the web on my dime. I feel like I'm missing something.

Re: Parse launches JavaScript SDK: Parse for Websites

#3

Post by hmans » Wed, May 30, 2012, 4:46 PM UTC

Absurdly lame opening paragraph. Made me want to use Parse a little bit less.

Re: Parse launches JavaScript SDK: Parse for Websites

#4

Post by princeverma » Wed, May 30, 2012, 4:56 PM UTC

taylorbuley wrote: post #2

Can anyone explain to me how authentication works with JS-based storage client like this? It scares me to think a user might have the ability to store anything via the web on my dime. I feel like I'm missing something.

I am wondering same thing, can somebody explain this please.

Re: Parse launches JavaScript SDK: Parse for Websites

#5

Post by endlessvoid94 » Wed, May 30, 2012, 4:56 PM UTC

Man, this is awesome. You can now basically host a full web app completely through a CDN.

Re: Parse launches JavaScript SDK: Parse for Websites

#6

Post by samsnelling » Wed, May 30, 2012, 4:58 PM UTC

After looking through the documents I am thoroughly impressed. Parse can handle user management... Are there lots of services out there that does this?!?! I've never figured out an elegant solution to do it with firebase.

Re: Parse launches JavaScript SDK: Parse for Websites

#7

Post by tudorw » Wed, May 30, 2012, 4:58 PM UTC

seriously, if it took you days to set up PHP and MYSQL you might have picked the wrong vocation...

Re: Parse launches JavaScript SDK: Parse for Websites

#8

Post by lacker » Wed, May 30, 2012, 5:02 PM UTC

taylorbuley wrote: post #2

Can anyone explain to me how authentication works with JS-based storage client like this? It scares me to think a user might have the ability to store anything via the web on my dime. I feel like I'm missing something.

There are two main types of security. Object-level, and app-level. Each object gets access controls that are similar to ACLs in Unix systems. That provides for the sort of security that separates different users' data from each other. On an app-level, you can also control per-class which operations are usable. For more detail, see:

https://parse.com/docs/data#security

You should be able use these in combination to secure your app. If you have more specific questions about how to secure a particular use case, drop us an email at feedback@parse.com and we can help figure something out.

Re: Parse launches JavaScript SDK: Parse for Websites

#9

Post by _pius » Wed, May 30, 2012, 5:08 PM UTC

Really awesome. I appreciate the fact that the tutorial starts off by addressing authentication.

https://parse.com/tutorials/todo-app-with-javascript

Re: Parse launches JavaScript SDK: Parse for Websites

#10

Post by jnbiche » Wed, May 30, 2012, 5:08 PM UTC

princeverma wrote: post #4

taylorbuley wrote: post #2

Can anyone explain to me how authentication works with JS-based storage client like this? It scares me to think a user might have the ability to store anything via the web on my dime. I feel like I'm missing something.

I am wondering same thing, can somebody explain this please.

It's relatively easy to do basic HTTP authentication using Javascript. If you're on SSL, that's reasonably secure. Once you're authenticated the server can issue a nonce that identifies you and gives you authorization (role-based access) to various pages/objects/apps based on that nonce.