only allow config updates that come to `config` endpoint

disarm-dev / douma-api

DiSARM api (2018 and beyond)

MIT License

2 stars 1 forks source link

only allow config updates that come to `config` endpoint #48

Open onlyjsmith opened 6 years ago

mosaic141688 commented 6 years ago

On the server side we can check the request headers to make sure that a PUT/POST request to config comes from the registry-client , reject it otherwise, that would mean requests from old versions of douma-app to config are not handled

onlyjsmith commented 6 years ago

This is fine. It’s only an admin function (and we want to change it anyway). Admins need to have up-to-date versions.

mosaic141688 commented 6 years ago