7 ms·

Right now the DB and App file servers use different IPs and domain names and both are set up with SSL and when I turn that off 3rd party cookies in my browser t

by oblib 9y ago

Right now the DB and App file servers use different IPs and domain names and both are set up with SSL and when I turn that off 3rd party cookies in my browser the authentication used on the DB server breaks.

twobyfour 9y ago
Your users are hitting your DB server directly?
- oblib 9y ago
  Yes. I use PouchDB.js on the client to store data and sync it with the CouchDB server. The CouchDB server also provides the authentication routines for the app.
  - twobyfour 9y ago
    Ok. I'm not very familiar with CouchDB, but with most databases I'vee used, that would be a major antipattern and security risk.
    - oblib 9y ago
      The CouchDB has CORS configured to only accept requests from the app server and it authenticates user requests so it's pretty solid.