search

untitled-pit-group / foxhound

PIFS standard backend
BSD Zero Clause License
0 stars 0 forks source link

Token authentication #2

Closed paulsnar closed 2 years ago

paulsnar commented 2 years ago

As per API spec.

For the most part this requires just a single endpoint, but also a bit of infra around it, notably, cache storage for ephemeral tokens, and database storage for config/permanent token, along with a safe way to issue and verify both; and a middleware for the /rpc endpoint to filter unauthorized accesses.

paulsnar commented 2 years ago

Moving to implement this because this might block other progress on testing Spaniel integration. (I don't think it's worth adding a switch to Spaniel's config to disable the token mechanism for the sole purpose of coping with the delay of this ticket.)