Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add alternative auth mechanism for API usage #833

Merged
merged 16 commits into from
Nov 7, 2023
Merged

Conversation

petterhj
Copy link
Collaborator

No description provided.

@petterhj petterhj requested a review from a team August 15, 2023 07:12
Copy link
Collaborator

@simenheg simenheg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LVGTM! Noen spørsmål:

  • Burde vi som nevnt kanskje plassert den et annet sted enn under "Admin" som forsvinner snart først som sist, slik at ikke brukerne trenger å lære seg dette to ganger?
  • Litt lett å misse at man kan gi integrasjonen et navn; burde man kanskje startet med den modalen der man skriver inn navn og beskrivelse når man trykker på "Legg til klient"?
  • Tror vi burde hashe secretene som vi lagrer i databasen for sikkerhets skyld.
  • Lenke til API-dokumentasjonen fra et sted på siden?
  • Burde kanskje få på rate limiting som vi snakket om.
  • Er c67350a rebaset eller noe inn her med en feil?

src/components/ApiClientCard.vue Show resolved Hide resolved
src/locale/locales/nb-NO.json Outdated Show resolved Hide resolved
src/locale/locales/nb-NO.json Outdated Show resolved Hide resolved
src/components/ApiClientCard.vue Outdated Show resolved Hide resolved
src/components/ApiClientCard.vue Show resolved Hide resolved
src/locale/locales/en-US.json Outdated Show resolved Hide resolved
src/locale/locales/en-US.json Outdated Show resolved Hide resolved
tests/firebase/firestore.test.js Outdated Show resolved Hide resolved
@petterhj petterhj force-pushed the protect-api-secrets branch from 7bf6a6f to fc5b0af Compare October 27, 2023 08:21
@petterhj petterhj added the wip Work in progress label Oct 27, 2023
@petterhj petterhj force-pushed the protect-api-secrets branch from f8a4999 to bd8feaa Compare October 30, 2023 08:10
@petterhj petterhj removed the wip Work in progress label Oct 30, 2023
Copy link
Collaborator

@simenheg simenheg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Noen spørsmål om småtweaks.

CHANGELOG.md Outdated Show resolved Hide resolved
firestore.rules Outdated Show resolved Hide resolved
functions/api/helpers.js Outdated Show resolved Hide resolved
Comment on lines +16 to +20
const apiLimiter = rateLimit({
windowMs: 15 * 60 * 1000, // 15 minutes
max: 100, // max 100 requests per window
message: 'Too many requests, please try again later.',
});
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🥳

src/db/ApiClient/ApiClient.js Outdated Show resolved Hide resolved
@petterhj petterhj force-pushed the protect-api-secrets branch from bd8feaa to e9bfa45 Compare November 2, 2023 12:22
@petterhj petterhj force-pushed the protect-api-secrets branch from e9bfa45 to e180685 Compare November 7, 2023 11:58
@petterhj petterhj merged commit 6e14020 into main Nov 7, 2023
4 checks passed
@petterhj petterhj deleted the protect-api-secrets branch November 7, 2023 12:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants