You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It would be a good idea to have an API endpoint which non-human clients (e.g. Sapelli) can use to request basic server information (version, installed extensions, etc.) and thus verify they are indeed talking to a (compatible) GeoKey set-up.
There could be security concerns with giving away this information in a public API, but then again we already expose the GeoKey version on publicly accessible admin pages.
To reduce the risk @mfc-julius points about the API should not expose superuser extensions unless the requester is an (authenticated) super user.
The text was updated successfully, but these errors were encountered:
It would be a good idea to have an API endpoint which non-human clients (e.g. Sapelli) can use to request basic server information (version, installed extensions, etc.) and thus verify they are indeed talking to a (compatible) GeoKey set-up.
There could be security concerns with giving away this information in a public API, but then again we already expose the GeoKey version on publicly accessible admin pages.
To reduce the risk @mfc-julius points about the API should not expose superuser extensions unless the requester is an (authenticated) super user.
The text was updated successfully, but these errors were encountered: