igniterealtime / openfire-httpFileUpload-plugin

Adds XEP-0363 functionality to Openfire that allows compliant clients to exchange files
Apache License 2.0
8 stars 10 forks source link

Authentication for GET and PUT url generated by httpfileupload #68

Open amitbirla1 opened 4 months ago

amitbirla1 commented 4 months ago

I’m working on configuring Openfire HTTP File Upload and I’m looking for guidance on how to properly authenticate GET and PUT requests for file download and upload URLs. Specifically, I want to ensure that only authenticated users can access these URLs and perform the corresponding operations. What are the best practices or recommended approaches for implementing authentication in Openfire HTTP File Upload?

Does HTTPFileUpload provide any default configuration to provide some authentication?

Any tips or insights would be greatly appreciated.

guusdk commented 4 months ago

The Openfire implementation currently does not have support for any kind of authentication. For this to be added, additional implementation needs to be realized. A primary entry point for this would be around the SlotProvider API.