New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add simple API TOKEN for mutation queries. #36

Open

chrisbc opened this issue May 10, 2021 · 1 comment

Assignees

Labels

API nshm-toshi-api

Member

chrisbc commented May 10, 2021

We want to keep this API open until more controls are needed , but for now we should make sure that mutations require an API key.

chrisbc self-assigned this

Member Author

chrisbc commented May 17, 2021

Proposal is that

read-only access (as required by simple_toshi_ui) will require no credentials
mutation access (as required by rupture gen tasks, etc) must supply a valid API key

A custom auth function makes sure that any muation quereis not having a valid TOKEN are rejected

chrisbc added nshm-toshi-api API labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment