why deepstreamHub? compare us getting started faq
use cases
blog contact

File-based authentication allows you to store usernames, passwords or password hashes and optional meta-data in a file that will be used to authenticate incoming connections.

File-based authentication is a good choice for scenarios with smaller amounts of connections that need authenticating, e.g. publicly readable realtime dashboards with a small number of provider processes delivering the data.

Using file-based authentication

To enable authentication to a deepstream server with user credentials stored in a local file, set the type key to file in the auth section of the server's configuration file.

  type: file
    path: ./users.yml # Path to the user file. Can be json, js or yml
    hash: 'md5' # the name of a HMAC digest algorithm
    iterations: 100 # the number of times the algorithm should be applied
    keyLength: 32 # the length of the resulting key

The path key contains a path to the file relative to the config file, that defines your users and passwords. By default this is the users.yml file that comes with deepstream, but the name or location is up to you.

In the hash key add the hashing algorithm to hash the passwords, for example, using md5 (or any other algorithm supported by your operating system). The iterations key sets how many times the algorithm should be applied to the user's password, and keyLength is the length of the generated key. These should match how you hashed the passwords.

In the users file, create a list of your users and their hashed passwords (you can create hashes with your setting using deepstreams hash command).

You also have the option to specify:

  • clientData – user data you want to be sent to the client upon successful login,
  • serverData – user data you want to be sent to permissioning.
  password: tsA+ks76hGGSGHF8**/JHGusy78=75KQ2Mzm
    favorite color: blue
    department: admin

  password: jhdGHJ7&0-9)GGSGHF8**/JHGusy78sjHJ&78
    favorite color: red
    department: finance

Start the deepstream server and you should see the authentication type confirmed.

deepstream starting with file authentication

In your application code you can now connect to the deepstream server and try to login a user.

const deepstream = require('deepstream.io-client-js')
const client = deepstream('localhost:6021')

  username: 'chris',
  password: 'password' // NEEDS TO BE REAL

If a success, the deepstream console will show:

Authentication success

And if a failure:

Authentication failure

You can then handle the outcome of the login request in your JavaScript code, for example:

  username: 'chris',
  password: 'password' // NEEDS TO BE REAL
}, (success, data) => {
  if (success === true) {
    // Handle a successful login
  } else {
    // Handle an incorrect login, the errorCode is available