Skip to content

Router / Extension - Add auth data to ensure only invoked lambdas are allowed to serve requests #79

Open
@huntharo

Description

@huntharo

Motivations

  • Some level of security is nice
  • Prevents accidentally taking traffic if an extension connects to the wrong router (e.g. because of IP reuse and some sort of delay/hang/replayed request)

Acceptance Criteria

  • Generate secure random data or signature
  • Send data in the invoke
  • Echo the data back in the connections
  • Reject requests that do not have the data or have the wrong value

Metadata

Metadata

Assignees

No one assigned

    Labels

    area-extensionExtension portion of the apparea-routerRouter portion of the appenhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions