Example of user access management?

[bit-garden]

I'm reading that this has authentication built in, but I'm not seeing any examples of this. You can spin up the server with a username and password, and use that username and password.... and then what? I'm not able to find a way to create other users, add properties to them or even restrict permissions by the users attributes.

I'm not really sure how this can be done without slotting another server in between to do more authentication for a system that does authentication...

[dodanex]

I've also searched inside javascript library documentation for this, but only found examples on how to authenticate. Let's hope that the documentation will be updated soon.

[veritymedia]

Well I cant comment on complex authentication and authorisation, but maybe take a look at this gist https://gist.github.com/koakh/fbbc37cde630bedcf57acfd4d6a6956b

It goes through how to setup a db and add users from a client app. Maybe it helps.

[bit-garden]

I'm not exactly sure I'm following the gist. It looks like it's using the db to store user information. I thought the authentication was built in. Like create a username/password to sign into the db with and only allow users to change rows they have access too.

From the looks of this, it looks like we still need a middleman server to ferry the requests back and forth. If this isn't how SurrealDB works, we might need to reword it to not have authentication built-in or row-based customizable access permissions.

This also seems very JavaScript specific. I can't figure out how to call signup or signin from the repl to even test this.

[bit-garden]

Update:
So the example found here https://surrealdb.com/features#permissions doesn't seem to work either.

-- Enable scope authentication directly in SurrealDB
DEFINE SCOPE account SESSION 24h
	SIGNUP ( CREATE user SET email = $email, pass = crypto::argon2::generate($pass) )
	SIGNIN ( SELECT * FROM user WHERE email = $email AND crypto::argon2::compare(pass, $pass) )
;

curl --request POST --header "Content-Type: application/json" --header "NS: test" --header "DB: test" --data "{'email': 'test', 'pass': 'apple'}" http://10.0.0.24:8000/signup

{"code":403,"details":"Authentication failed","description":"Your authentication details are invalid. Reauthenticate using valid authentication parameters.","information":"There was a problem with authentication"}

[bit-garden]

this works and gives a token. Now to figure out how to use the token.