Skip to content

Adding a signature system for sensitive endpoints #37

Description

@Niwer1525

The idea, is to have a config in Photon (UUID endpointSignatureSecret = UUID.random();)
Then in some endpoints code (especially sensitive endpoints such as License Key Validation) requiring a parameter to be the secret and then check if the secrets matches.

This can avoid some random third parties trying to probe keys or other sensitive data.

Note this is only useful for Backend-to-Backend communications

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions