search

digisomni-syndicate / vircadia-metaverse

Metaverse server for Vircadia
https://vircadia.com/
Apache License 2.0
3 stars 7 forks source link

Improve domain sever APIs. #30

Open namark opened 1 year ago

namark commented 1 year ago

I've implemented a domain access token authentication strategy and made a account and domain public key reading APIs public for compatibility with current domain server implementation. Might need to revisit this in the future as there are some things that I'm not sure about:

  1. The domain access token has a expiration date, which is currently unused, since It's unclear what should happen then.
  2. Using the access token gives access to specific APIs as the user that generated the token, with all relevant permissions. Might need to reconsider the APIs exposed this way and/or revoke some permissions.
  3. The account public key API also returns the account username and id, which I'm not sure is ok to be public.