Re:PgREST: Node.js in the Database, compatible with MongoLab...
by audreyt on Friday November 29, 2013 @10:51AM
(#6819811)
For authentication (authn) it's quite easy, and in production we do have a separate authn daemon.
For authorization (authz) it's IMHO a bit better to handle it in the DB level, similar with Firebase's ACL lists.
EDIT: how easy do you think it would be to do the authentication etc outside, at the level of the nginx proxy?