5 ms·

Your users are hitting your DB server directly?

• oblib 9y ago
  Yes. I use PouchDB.js on the client to store data and sync it with the CouchDB server. The CouchDB server also provides the authentication routines for the app.
  • twobyfour 9y ago
    Ok. I'm not very familiar with CouchDB, but with most databases I'vee used, that would be a major antipattern and security risk.
    • oblib 9y ago
      The CouchDB has CORS configured to only accept requests from the app server and it authenticates user requests so it's pretty solid.