AscSecTeam / knackered

Scoring Engine API Service
MIT License
0 stars 0 forks source link

develop api #2

Open brettlangdon opened 10 years ago

brettlangdon commented 10 years ago

This service is going to basically be a way to configure the teams and other settings for running the engine and will need an api for the checks to report to as well as end points for the front end to communicate with.

brettlangdon commented 10 years ago

For this service I am thinking just a simple JSON REST server, maybe using flask (personal preference for python web framework).

Also, what should we do about security? We probably want to think of a way we can whitelist which hosts can access the api, or maybe just have the engine generate some access keys that need to be sent with every request?

yzguy commented 10 years ago

Hey, what about this. It's called Sandman.io It essentially creates a REST API for your database

https://github.com/jeffknupp/sandman http://sandman.io

Sounds exactly like what we are trying to do, but doing it for us.

brettlangdon commented 10 years ago

yeah, seems like it for the most part.

how does it handle things like security?

can we write custom endpoints for it to do custom logic?

yzguy commented 10 years ago

I'm sure we could.

brettlangdon commented 10 years ago

@yzguy can you throw together a quick prototype of using sandman?

yzguy commented 10 years ago

Yes, I'll try to get something together today or tomorrow.

yzguy commented 10 years ago

Sorry, have been busy.

What do you think about this? http://sensuapp.org/

brettlangdon commented 10 years ago

well, I have been thinking about it, we could actually use something like https://github.com/etsy/statsd maybe?

idk, my life is relatively busy, so... someone needs to try and prototype something ;)

andolojm commented 10 years ago

https://sandman.readthedocs.org/en/latest/using_sandman.html

Sandman can do custom endpoints. See the "Providing a custom endpoint" section.

andolojm commented 10 years ago

Thinking of what we need to track, our DB could probably be this simple: