Closed lidel closed 3 years ago
This simplifies authorization logic and removes the surface for leaking token via URL as noted in https://github.com/ipfs/pinning-services-api-spec/issues/37#issue-665397179
Pinning Services only need to implement support for the HTTP header.
PREVIEW: https://bafybeib4xyzuzrsk5pl5vvqt6mwlor2w2xj6b6yqj7lgqrlhoafgmgaoey.ipfs.dweb.link/#specUrl=https://raw.githubusercontent.com/ipfs/pinning-services-api-spec/remove-auth-parameter/ipfs-pinning-service.yaml
Closes #37 cc @obo20 @GregTheGreek @priom @jsign @sanderpick @andrewxhill
This simplifies authorization logic and removes the surface for leaking token via URL as noted in https://github.com/ipfs/pinning-services-api-spec/issues/37#issue-665397179
Pinning Services only need to implement support for the HTTP header.
PREVIEW: https://bafybeib4xyzuzrsk5pl5vvqt6mwlor2w2xj6b6yqj7lgqrlhoafgmgaoey.ipfs.dweb.link/#specUrl=https://raw.githubusercontent.com/ipfs/pinning-services-api-spec/remove-auth-parameter/ipfs-pinning-service.yaml
Closes #37 cc @obo20 @GregTheGreek @priom @jsign @sanderpick @andrewxhill