Question

I’m pretty sure this is a simple question, but I have no idea where the socket.io docs are and the one at http://labs.learnboost.com/socket.io/ don’t really help.

So let’s say I have a socket.io http server and written a website to connect to it.

1. How do I provide protection to the server so that unauthorized people(people who connected not through the website) will be blocked/dropped/banned.

2. How do I end a socket connection on the server side? So If I have

   io.sockets.on('connection', function (socket) {
   socket.on('end', function() {
       var i = global_sockets_list.indexOf(socket);
       global_sockets_list.splice(i, 1);
     });
   
     socket.emit('end'); // Doesn't work, just sends data
     socket.end(); //error
   
   });
   

How do I end a socket connection? (The connect then disconnect above is for testing)

Answer 1

Try calling:

socket.disconnect('unauthorized');

or

socket.close();

EDIT: You might be able to check the referer header. Look at Socket.io Security Issues for more info.