lbryio/web-daemon

Lock down daemon.lbry.tech to only accept calls from lbry.tech

Closed this issue · 3 comments

@kauffj commented on Wed May 16 2018

lbry.tech will do all other enforcing of accepted calls inside of it's logic

The only lockdown that needs to happen is restricting daemon.lbry.tech to only accept calls from the lbry.tech server.


@kauffj commented on Wed May 16 2018

Who wrote daemon.lbry.tech and/or knows how to resolve this? Is it @nikooo777 or @maximest-pierre ?


@kauffj commented on Wed May 16 2018

(Also @lyoshenka please be aware of this)

@maximest-pierre can you figure out how to get this milestoned for May 23rd web team?

The idea that I got is that we can create an access token using hashlib and os.urandom.

this issues has been resolved and is deploy