Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove admin websocket, call conductor handle directly #15

Open
mattyg opened this issue Nov 24, 2024 · 0 comments
Open

Remove admin websocket, call conductor handle directly #15

mattyg opened this issue Nov 24, 2024 · 0 comments

Comments

@mattyg
Copy link
Member

mattyg commented Nov 24, 2024

By creating an admin websocket, we allow any process to call it and make admin calls to the conductor.

Instead we should gatekeep admin calls so they can only be made through the HolochainService itself (which itself should gatekeep admin actions via user permission -- see #5).

One option is for holochain core to support pre-defined auth tokens for admin websockets. An alternative is to not create an admin websocket and simply call the conductor handle directly.

@mattyg mattyg added this to Holochain Dec 4, 2024
@github-project-automation github-project-automation bot moved this to Backlog in Holochain Dec 4, 2024
@mattyg mattyg moved this from Backlog to Ready for refinement in Holochain Dec 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: Ready for refinement
Development

No branches or pull requests

1 participant