2 ms·
Is server authroity and broadcast permissions handled or left as a task for the user? Can channels be locked down to a list of users? Can users be kicked from a
by jayd16 4y ago
Is server authroity and broadcast permissions handled or left as a task for the user? Can channels be locked down to a list of users? Can users be kicked from a channel? Is message spam/flooding/DDOSing users in a channel protected?
Quickly skimming the docs, I don't see any examples of this.
Server authority and some of this security can be added app level but I think the message throttling needs to be built in if its going to support any kind of pvp/untrusted peer scenario.
Anyone know the story there?
- wenbo 4y ago> Is server authroity and broadcast permissions handled or left as a task for the user? Can channels be locked down to a list of users? Broadcast permissions is currently not handled by the server and left to the developer to implement. We have discussed this internally and will prioritize Broadcast authorization accordingly because we've gotten feedback about this from a number of developers. > Can users be kicked from a channel? Not at the moment but again we've gotten feedback about this as well and will prioritize it. > Is message spam/flooding/DDOSing users in a channel protected? We have built rate limiting and other protections so bad actors don't affect the good in the cluster. A colleague of mine posted these limitations of Supabase Realtime to prevent abuse: https://news.ycombinator.com/item?id=32511586 https://news.ycombinator.com/item?id=32511586.