New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Temporary Auditor access #164

Open

dominic22 opened this issue Aug 5, 2021 · 0 comments

Contributor

dominic22 commented Aug 5, 2021 •

edited

Loading

Auditor uses subscribe to subscribe for a channel

Since the author knows what the preshared key is it can give access to the channel without directly passing the preshared key to the auditor.

If auditor subscribes for a channel without passing presharedKey in the subscribe payload the author can set this when authorizing the subscriptoin.

In this case the presharedKey will be encrypted with the password of the server.

Subscription of the auditor needs to have a field telling that it is an indirect authorization.

dominic22 self-assigned this

dominic22 changed the title ~~Authorize Auditor without sharing keys directly~~ Temporary Auditor access

dominic22 removed their assignment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment