feat(backend): secure admin api from replay attacks

interledger / rafiki

An open-source, comprehensive Interledger service for wallet providers, enabling them to provide Interledger functionality to their users.

https://rafiki.dev/

Apache License 2.0

234 stars 83 forks source link

Closed njlie closed 3 months ago

njlie commented 3 months ago

Admin API signature validation now caches signatures in redis and limits how late a signature may be used so that those same signatures cannot be reused for subsequent requests.

Fixes #2725.

netlify[bot] commented 3 months ago

Name	Link
Latest commit	c1a6b66d4f3e2b74a3cb4f0b4ca1142c61fdcbbe
Latest deploy log	https://app.netlify.com/sites/brilliant-pasca-3e80ec/deploys/6668c138305bc5000872c821