Setup Access Control

Use this when subscribers are authenticated users in Catalyst Authentication with predefined roles.

2. Select User Roles.

3. Select one or more roles from the dropdown menu.
   

4. Click Create or Update.

Only users belonging to the selected roles can subscribe to the channel. When a role is removed, subscribers with that role lose access immediately. When a role is granted, users with that role can subscribe immediately.

Use this when you need custom authentication logic beyond role-based access (SSO, session-based connections, anonymous users, or custom criteria).

2. Create an Advanced I/O function that handles subscriber authentication:

module.exports = async (req, res) => {
    const { userId, connectionName } = req.body;
    
    // Your custom validation logic
    const isAuthorized = await yourCustomValidationLogic(userId);
    
    if (isAuthorized) {
        res.status(200).json({ approved: true });
    } else {
        res.status(403).json({ approved: false, reason: "Unauthorized" });
    }
};

The function must accept connection requests, perform validation logic, and return approval or rejection.

3. Select Custom Logic.

4. Select your Advanced I/O function from the dropdown. If the function doesn’t exist, click Create new Advanced I/O function to create one first.
   

5. Click Create or Update.