search

beckn / protocol-server

protocol-server
6 stars 15 forks source link

Add security for the Redis cache #225

Open vbabuEM opened 2 months ago

vbabuEM commented 2 months ago

Description

This came up during the ongoing effort on ONIX-AWS. The team wants to use managed services for Redis. Currently the software does not use any password to access Redis. Please investigate if it is possible to add authentication for this. During implementation consider factors such as compatibility, existing implementation upgrades etc.

vbabuEM commented 2 months ago

cc. @viraj89 @emmayank @yesrag2309

emmayank commented 2 months ago

Thanks @vbabuEM for raising the issue. assigned it to @em-abee

emmayank commented 2 months ago

Hey @ankitShogun , please check with @vbabuEM for your doubts

ankitShogun commented 2 months ago

Was stuck with this ticket due to facing an issue with the protocol server itself on my local matching. After fixing that added the authentication but unable to verify whether the authentication is properly enabled or not. Need some more time. Will pick it up if get time in next iteration

emmayank commented 2 months ago

@ankitShogun if this is still not done, please do not change the status to in-review