use secure cookies for auth about socketioxide HOT 4 CLOSED

it works. Not sure why the first time I tried it showed error.

Probably having cookies() as a function will help. But for now I'm good.

from socketioxide.

You can access any header made for your request by using req_parts() on your SocketRef. Because I didn't exported the Socket struct. The doc of Socket is missing on doc.rs :/

E.g. :

io.ns("/", |s: SocketRef, Data::<Value>(data)| {
    let cookies = socket.req_parts().headers.get(http::headers::COOKIE); // Comma separated list of cookies
    info!("Received: {:?}", data);
    s.emit("welcome", data).ok();
});

from socketioxide.

I was able to access via let cookie= &socket.req_parts().headers.get("cookie");. Probably worth having .cookies so we don't need to parse it manually?

How do I write async code to validate the user token given I cannot pass async functions.

async fn on_connect(socket: SocketRef, Data(data): Data<Value>) {
  let cookie= &socket.req_parts().headers.get("cookie").unwrap_or_default();
  if validate_user(cookie).await? {
  }
}

from socketioxide.

You should be able to put async function as handler like this :

async fn test(s: SocketRef) {
}
io.ns("/", test);

socket.on(
    "message",
    |socket: SocketRef, Data::<Value>(data), Bin(bin)| async move {
        info!("Received event: {:?} {:?}", data, bin);
        socket.bin(bin).emit("message-back", data).ok();
    },
);

For the .cookie part, it would only be an alias of that socket.req_parts().headers.get("cookie") because it would be useless to parse cookies for the case where they are not used. But that might be a good idea to add this alias

from socketioxide.