search

markusfisch / BinaryEye

Yet another barcode scanner for Android
https://play.google.com/store/apps/details?id=de.markusfisch.android.binaryeye
MIT License
1.47k stars 121 forks source link

[Feature Request] Payload integrity #220

Open vsviridov opened 3 years ago

vsviridov commented 3 years ago

Hello,

When sending data to a remote URL, the app essentially works as a web-hook. It would be nice if some integrity mechanism was added. Simplest being some kind of hmac('sha-256', secret, payload) put into a header.

The secret field should be configurable. This way the server can validate the authenticity of the payload and not simply expose an endpoint where anyone with the knowledge of the URL can write bogus data to.

markusfisch commented 3 years ago

Sorry for the late answer. Yes, that makes sense 👍