search

DNYLA / Labmaker

A Clean way to engage and interact with your community on a range of platforms (Discord, Reddit & Own Website).
https://labmaker.vercel.app/
2 stars 0 forks source link

API Security Issue #22

Open DNYLA opened 2 years ago

DNYLA commented 2 years ago

The Reddit data inputted from the admin dashboard should be encrypted (Username, password, client id, etc) or authenticate via OAUTH instead. (Not sure if you are limited when using OAUTH)

DNYLA commented 2 years ago

Implemented on Reddit Routes & Guild Tickets Routes.

Any route connected to the Guild or Discord (apart from Tickets) requires extra fetching/data to authorize. A Model needs to be created for the best way to approach. The Two ways I have thought of are Calling Discord API every time may put extra load/wait time. Another way could be to cache the data when we fetch but we would need a way to invalidate the cache to force updates (not sure if this would even be possible)