Skip to content

Adding a signature system for sensitive endpoints #37

Description

@Niwer1525

The idea, is to have a config in Photon (UUID endpointSignatureSecret = UUID.random();)
Then in some endpoints code (especially sensitive endpoints such as License Key Validation) requiring a parameter to be the secret and then check if the secrets matches.

This can avoid some random third parties trying to probe keys or other sensitive data.

Note this is only useful for Backend-to-Backend communications

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions