search

lbryio / web-daemon

A web-based API for using LBRY (used by lbry.tech)
5 stars 1 forks source link

Lock down daemon.lbry.tech to only accept calls from lbry.tech #3

Closed kauffj closed 6 years ago

kauffj commented 6 years ago

@kauffj commented on Wed May 16 2018

lbry.tech will do all other enforcing of accepted calls inside of it's logic

The only lockdown that needs to happen is restricting daemon.lbry.tech to only accept calls from the lbry.tech server.

@kauffj commented on Wed May 16 2018

Who wrote daemon.lbry.tech and/or knows how to resolve this? Is it @nikooo777 or @maximest-pierre ?

@kauffj commented on Wed May 16 2018

(Also @lyoshenka please be aware of this)

kauffj commented 6 years ago

@maximest-pierre can you figure out how to get this milestoned for May 23rd web team?

maximest-pierre commented 6 years ago

The idea that I got is that we can create an access token using hashlib and os.urandom.

maximest-pierre commented 6 years ago

this issues has been resolved and is deploy