server.js

// Initial connect-command
Ape.registerHookCmd("connect", function(params, infos) {
    
    if (!infos.user.connected) {

        // Request-Auth from Backend
        var request = new Http('http://backend/public/tokenlogin');
        request.set('method', 'POST');

        // send token and additional data
        request.writeObject({
            'token'  : params.token,
            'time'   : params.time,
            'user_id': params.user_id
        });

        request.getContent(function(result) {
            var answer = {};
            try {
                answer = JSON.parse(result);
            } catch(e) {};

            // set public data -> could retrieved on the client-side
            infos.user.setProperty('firstname', answer.web_user.firstname);
            infos.user.setProperty('lastname',  answer.web_user.lastname);
            infos.user.setProperty('user_id',   answer.web_user.user_id);

            // set privat data -> only on the server-side
            infos.user.web_user     = answer.web_user;
            infos.user.user_id      = answer.web_user.user_id;
            
            // state as connected
            infos.user.connected = true;
         
            // Send BACKIDENT
            infos.user.pipe.sendRaw('BACKIDENT', { 'ok': 'ok' }, { 'from': infos.user.pipe } );

        });
    }
    
    return 1;
});