Open aleene opened 6 years ago
I'd prefer a token based approach like OIDC #1204 where the app is based off the auth token that was issued for a specific app. That would make it more difficult to fake being another app (which might be used to get a competing app banned).
Does this also allow the user to sign in?
Does this also allow the user to sign in?
Sorry for the late reply! No, it would not. And I think my previous idea of integrating that with OIDC is not good. We could investigate using API keys from tools like Gravitee to identify API consumers. Adding additional edit metadata such as the client's version is probably a good idea anyways!
What
-Add fields to the write api for the app client name and the app client version number. This should identify which app is submitting the data.
Part of
5523