How can I parse PHP user details (session) to Node.js server?

Question

so I have 2 pages: Chat page which runs on Node.js and Socket.io (WebSockets). And main page where user logins etc... I want to make it so when user logins on main page -> it validates details -> then stores user ID in session and goes into chat where he's identified by his userID.

Oh yeah and user accounts are stored on MySQL.

Community · Accepted Answer · 2017-05-23 10:25:59Z

1

You can parse PHP (file-based) sessions from node with a module like groan. However, a better solution is probably to use a better session store such as redis. An example of sharing sessions between node and PHP using redis can be found here.

edited May 23, 2017 at 10:25

CommunityBot

11 silver badge

answered Oct 13, 2014 at 0:06

mscdex

107k15 gold badges201 silver badges159 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Max · Accepted Answer · 2014-10-12 23:59:21Z

0

Okay. Cookies mechanism was created to communicate with different environments. Let's use it..

PHP:

Validate user data and save it into DB and then save id to cookies.

NodeJS:

Read that id from cookies and get data from DB (MySQL provider for nodejs)

answered Oct 12, 2014 at 23:59

Max

1,84413 silver badges22 bronze badges

2 Comments

arleitiss Over a year ago

I had that approach in mind but: What stops user from modifying cookie, setting ID to other user and using his personality to chat?

Max Over a year ago

Then you need to more advanced way -- tokens. Set ID and token (sha1 hash for example). Store both of these in DB and then try to find entry equals to it. Hacker will must to use brute-force attack (not dangerous) to hack this. You can even add expire time for tokens

Collectives™ on Stack Overflow

How can I parse PHP user details (session) to Node.js server?

2 Answers 2

Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related