9. Securing Your Application | Meteor Cookbook

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents
Feedback & Rating

Meteor Cookbook

By : Isaac Strack

4.4 (5)

Meteor Cookbook

4.4 (5)

By: Isaac Strack

Overview of this book

This book is meant for developers of all experience levels looking to create mobile and full-stack web applications in JavaScript. Many of the simple recipes can easily be followed by less-experienced developers, while some of the advanced recipes will require extensive knowledge of existing web, mobile, and server technologies. Any application or enterprise web developer looking to create full-stack JavaScript-based apps will benefit from the recipes and concepts covered in this book.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Sections

Conventions

Reader feedback

Customer support

Free Chapter

1. Optimizing Your Workflow

1. Optimizing Your Workflow

Introduction

Installing Meteor

Finding documentation for Meteor

Getting help with questions

Setting up your project file structure

Setting up your development environment

Using the web console

Deploying a test app to Meteor

Deploying to Meteor using a CNAME redirect

Deploying to a custom hosted environment

Deploying with Meteor Up (MUP)

Using CoffeeScript

Using CSS compilers

2. Customizing with Packages

2. Customizing with Packages

Introduction

Adding Meteor packages

Removing Meteor packages

Discovering new packages with Atmosphere

Creating a multipage application with Iron Router

Building a custom package

Using npm modules

Publishing custom packages to Atmosphere

3. Building Great User Interfaces

3. Building Great User Interfaces

Introduction

Inserting templates with Spacebars

Inserting raw HTML using triple braces

Creating dynamic lists

Building a smooth interface with Bootstrap

Creating customized global helpers

Creating custom components

Using reactivity with HTML attributes

Using dynamic templates

Animating DOM elements

4. Creating Models

4. Creating Models

Introduction

Implementing a simple collection

Using the Session object

Sorting with MongoDB queries

Filtering with MongoDB queries

Creating upsert MongoDB queries

Implementing a partial collection

5. Implementing DDP

5. Implementing DDP

Introduction

Reading the DDP stream

Using client-only collections

Implementing multiserver DDP

Integrating DDP with other technologies

6. Mastering Reactivity

6. Mastering Reactivity

Introduction

Creating and consuming a reactive value

Using Ajax query results in ReactiveVar

Making a custom library reactive

Updating Blaze templates without Mongo

Using inline data to modify UI elements reactively

Integrating a jQuery UI

7. Using Client Methods

7. Using Client Methods

Introduction

Creating dynamic graphs with SVG and Ajax

Using the HTML FileReader to upload images

Creating a coloring book with the Canvas element

8. Integrating Third-party Libraries

8. Integrating Third-party Libraries

Introduction

Using npm packages directly

Building graphs with D3.js

Creating cutting-edge UIs with Polymer

9. Securing Your Application

9. Securing Your Application

Introduction

Basic safety – turning off autopublish

Basic safety – removing insecure

Securing data transactions with allow and deny

Hiding data with façades

Protecting the client with browser-policy

10. Working with Accounts

10. Working with Accounts

Introduction

Implementing OAuth accounts packages

Customizing the accounts login

Performing two-factor authentication

11. Leveraging Advanced Features

11. Leveraging Advanced Features

Introduction

Building custom server methods

Creating custom EJSON objects

Handling asynchronous events

Using asynchronous functions

12. Creating Useful Projects

12. Creating Useful Projects

Introduction

Creating RESTful web services

Creating a complete app with Iron Router

Deploying apps to mobile devices

Adding social sharing

Index

Index

Customer Reviews

4.4 (5)

5 star

60%

4 star

20%

3 star

20%

2 star

0

1 star

0

Basic safety – removing insecure

Right after removing autopublish, we will want to control how data is added, removed, and updated, and put in some security measures, as appropriate. To enable this level of control, we need to remove the appropriately-named insecure package. To restore functionality after removing the insecure package, we will need to utilize a basic collection.allow declaration. This recipe shows you how to do exactly that.

Getting ready

We will use the Basic safety – turning off autopublish recipe found in this chapter as our baseline. Once you have completed that recipe, make a copy of the secure-autopublish folder (note: you will need all subfolders, including the hidden .meteor folder), rename it to secure-rm-insecure, start your app using the meteor command in the terminal, and you will be ready to proceed.

How to do it...

Just like the previous recipe for autopublish, we simply need to remove the insecure package, and then restore functionality.

In a new terminal window...

Search

Your notes and bookmarks