Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add security when registering frontend with encryption/signing #4

Closed
jrmi opened this issue Oct 28, 2020 · 1 comment
Closed

Add security when registering frontend with encryption/signing #4

jrmi opened this issue Oct 28, 2020 · 1 comment

Comments

@jrmi
Copy link
Owner

jrmi commented Oct 28, 2020

See:

Requirements:

  • Easy to use in dev mode
  • Easy to use in pipeline
  • Allow multiple hostname live on same siteId (ex: For deploy preview for instance)
  • Allow same hostname live on multiple siteId (Try on dev then try on prod or have multiple server)

Steps:

  1. We register the site via an API and get an api key
  2. We crypt "something" with the key to pass a challenge and put in setup ? Or we crypt the setup.py file with the secret key ?
  3. When we visit the site, since the browser call an endpoint, the server try to access the referer (or whatever specified in query) and load the setup from it ?
@jrmi jrmi changed the title Add security when registering frontend with asymetric encryption/signing Add security when registering frontend with encryption/signing Dec 8, 2020
@jrmi
Copy link
Owner Author

jrmi commented Jan 8, 2021

Done with ricochet

@jrmi jrmi closed this as completed Jan 8, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant