Skip to content

Security: Enable JWT verification for all non-read endpoints #81

@jacobhebbel

Description

@jacobhebbel

Endpoints involving the upload / edit / removal from data were removed, but their functionality will be useful in the future. Let's plan on exposing necessary endpoints for this behavior securely with JWT verification. This feature will restrict who can send requests to our server to people with these JWT tokens (hard to intercept if sent http only using https encryption practices + a 6hr expiry)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status

In progress

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions