Closed MSch closed 8 years ago
Move to local config? (If wew change this, it also needs to be change on the bot end. /cc @tosh)
(Same key for the planned protection of other api endpoints, I guess.)
Jup we'd need to change this at the same time
(Same key for the planned protection of other api endpoints, I guess.)
Just to make sure: Same secret for all API endpoints used by the bot, but a different secret for the API endpoints exposed to the campaign website
define "exposed to the campaign website". to a frontend or to the CRM?
ok, in settings_local, there is now
BOT_API_KEY = 'key1'
CRM_API_KEY = 'key2'
to use:
from hack4vdb.settings_local import BOT_API_KEY
from itsdangerous import JSONWebSignatureSerializer
s = JSONWebSignatureSerializer(BOT_API_KEY)
(ask me for the specific keys or look in the file on the server.)
@tosh changed on my site, please update bot (see slack for new BOT_API_KEY
)
new bot key live in bot
anthill/views.py