parse-community/parse-server

Features

• Backend-as-a-Service Platforms - Functions as a complete backend-as-a-service platform providing database, storage, and authentication services.
• Node.js Server Frameworks - Provides a complete server environment for managing database schemas, authentication, and API routing using Node.js and Express.
• GraphQL API Generators - Automatically derives GraphQL schemas and resolvers from the application's underlying data models.
• Data Querying - Supports complex data retrieval using regex, dot notation on arrays, and result set limits.
• Data Schema Definitions - Provides tools for creating user-defined schemas and managing database migrations and index retention.
• Database Change Subscriptions - Implements a live query mechanism to stream real-time updates of specific data fields to clients.
• Live Update Subscriptions - Maintains persistent connections to push real-time database change notifications to clients via a subscription model.
• Storage Backend Adapters - Abstracts database and file system interactions through interchangeable drivers to support multiple backends.
• Unified Storage Interfaces - Streams binary data between clients and storage providers using a unified API for local and cloud environments.
• Real-Time Data Engines - Implements a real-time data engine that pushes database updates to clients via persistent WebSocket connections.
• Middleware-Based Request Pipelines - Processes incoming HTTP requests through a modular chain of validators for rate limiting and access control.
• Field-Level Access Controls - Restricts access to specific object fields based on the identity of the requester or the trigger.
• Identity and Access Management - Coordinates user authentication, email verification, and fine-grained access control for data fields.
• Field-Level Permissions - Implements security policies that restrict access to specific sensitive fields based on ownership or permissions.
• Third-Party Authentication Providers - Connects external identity providers to manage user logins and verify the expiration of authentication tokens.
• Token-Based Authentication - Handles user authentication and session persistence using secure tokens and third-party identity provider adapters.
• User Identity Management - Provides a comprehensive system for managing user profiles, authentication, and the identity data lifecycle.
• GraphQL APIs - Automatically generates a GraphQL schema from the application data model to support custom queries and mutations.
• Real-Time Data Streaming - Pushes database updates to clients instantly using a live query mechanism for reactive interfaces.
• Request Routing - Maps incoming HTTP requests to specific handlers or pages using a configurable routing system.
• Server Functions - Implements server-side functions that allow clients to invoke custom backend logic with automated data encoding.
• Response Sanitization - Removes detailed error messages and protected fields from API responses to prevent sensitive information leakage.
• Cloud Storage Integrations - Integrates with remote cloud platforms to host and manage application files.
• Data Aggregation Pipelines - Processes large datasets through transformation stages using native database aggregation frameworks.
• Database-Native Aggregations - Executes complex data processing pipelines using database-native syntax to transform and summarize records.
• File Storage Adapters - Provides an adapter-based storage layer to interact with various cloud storage providers and local disks.
• File Upload Management - Handles binary file storage with support for stream-based uploads and directory organization.
• Field-Level Live Updates - Watches for specific field changes or distance queries to push live updates to clients instantly.
• Runtime Function Mapping - Executes custom server-side JavaScript logic by mapping API requests to user-defined functions at runtime.
• Backend Framework Deployment - Allows mounting a ready-to-use backend to a server to handle API requests and data management.
• Custom Logic Triggers - Provides custom server-side functions that support multipart form data and custom HTTP status codes.
• API Access Security - Restricts API access via IP-based filters, route allow-lists, and protected field exemptions.
• Brute-Force Protection - Temporarily disables user accounts after a set number of failed login attempts to prevent brute-force attacks.
• Administrative Access Restrictions - Limits the IP addresses permitted to use the master security key to prevent unauthorized administrative access.
• Email Verification Flows - Validates a user's identity via a token-based email link to ensure the provided address is owned by the user.
• Email Verification Services - Implements automated workflows for account verification and password reset emails using third-party adapters.
• File Upload Security - Prevents SSRF attacks by validating file URLs against a list of allowed domains during upload.
• Strength Analyzers - Validates password strength using regex patterns and prevents the reuse of previous passwords.
• Route-Based Restrictions - Limits external access to specific REST API routes using regex patterns to ensure approved interaction paths.
• File Download Permissions - Controls file download permissions and customizes response headers for security and content-type validation.
• User Access Management - Controls whether users can be created by clients and restricts direct access to user data.
• Identity Verification - Coordinates email verification and password reset workflows using configurable email adapters.
• Account Security Policies - Enforces security requirements for user passwords and general account management.
• User Privacy Protection - Enforces private user settings and restricts direct access to user data for security and compliance.
• Inter-Function Communication - Supports executing server-side logic and handling data encoding for objects passed between different backend functions.
• Query Complexity Calculators - Caps the resource consumption of incoming queries to prevent performance degradation and denial-of-service attacks.
• Rate Limiting - Caps request volume based on IP address, user, or session using local or distributed limiting to maintain system stability.
• Public Page Mapping - Maps incoming HTTP requests to specific pages or routers to serve content via a public interface.
• Custom Web Routes - Enables the creation of custom URL paths to build specific user flows and web pages.

Star history