Skip to content
This repository has been archived by the owner on Apr 11, 2023. It is now read-only.

Signing Internal Requests #13

Closed
markwylde opened this issue Sep 7, 2020 · 1 comment
Closed

Signing Internal Requests #13

markwylde opened this issue Sep 7, 2020 · 1 comment

Comments

@markwylde
Copy link
Contributor

Internal requests are authentication via an internal secret being added to the header which is matched against the config file.

Instead of passing the secret directly into the header, we should use the secret to create a fingerprint of the:

${request.method}${request.url}${Date.now()}
@markwylde
Copy link
Contributor Author

The concept of internal requests is being removed #96.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant