openai/openai-realtime-api-beta

Secure Deployment of Relay Server

Closed this issue · 2 comments

kxngHunter commented

Currently, if I deploy my relay server, it would be publicly available to anyone with the URL. How can I securely deploy it instead of running it locally? Thanks in advance!

chady commented

I have my relay running on a subdomain of my app.
In my app I set a domain-wide encrypted cookie that includes a session token, the relay reads that cookie, decrypts the token, then validates it with my backend server.

  • 👍1
invens-devuser1 commented

Instead of using a relay server, why not use the OpenAI ephemeral client token?