Assert server endpoint in RapidPro should probably be setup to support token auth as well as regular session auth - that way it can be easily used by the flow editor as well as goflow.
Goflow then either needs to be configured with a token, or the token(s) are included in flowserver requests from RapidPro.
Goflow currently doesn't apply any restrictions to which asset URLs it will fetch from so definitely can't have it sending auth tokens off to any URL.
rowanseymour
commented
7 years ago
Assert server endpoint in RapidPro should probably be setup to support token auth as well as regular session auth - that way it can be easily used by the flow editor as well as goflow.
Goflow then either needs to be configured with a token, or the token(s) are included in flowserver requests from RapidPro.
Goflow currently doesn't apply any restrictions to which asset URLs it will fetch from so definitely can't have it sending auth tokens off to any URL.