Skip to content

Require Relay to use HTTPS #397

@petruki

Description

@petruki

Is your feature request related to a problem? Please describe.
Hosting Switcher API for the public creates breaches as Relay calls are not internally managed by the API.
In this particular situation, we want to require users to provide a valid HTTPS endpoint.

Describe the solution you'd like
Validate the Relay endpoint by requiring it to start with HTTPS.
A configuration can be provided in order to bypass this validation.

RELAY_BYPASS_HTTPS: default false

This flag validation should occur in both situation

  • Creating/Updating the Relay endpoint
  • Triggering a Relay

Metadata

Metadata

Assignees

Labels

enhancementNew feature or requestsecurityVulnerability detected

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions