chore: disable getProofs endpoint for external requests

dashpay · Apr 30, 2024 · c09aab6 · c09aab6
1 parent b9d4d2c
commit c09aab6
Showing 1 changed file with 16 additions and 0 deletions.
diff --git a/packages/dashmate/templates/platform/gateway/envoy.yaml.dot b/packages/dashmate/templates/platform/gateway/envoy.yaml.dot
@@ -155,6 +155,22 @@
                   cluster: dapi_api
                   # Upstream response timeout
                   timeout: 10s
+              # getProofs endpoint only for internal use (DAPI -> Drive)
+              - match:
+                  path: "/org.dash.platform.dapi.v0.Platform/getProofs"
+                route:
+                  response_headers_to_add:
+                    - header:
+                        key: "Content-Type"
+                        value: "application/grpc-web+proto"
+                    - header:
+                        key: "grpc-status"
+                        value: "12"
+                    - header:
+                        key: "grpc-message"
+                        value: "getProofs endpoint is only for internal use"
+                  direct_response:
+                    status: 204
               # Drive gRPC endpoints
               - match:
                   prefix: "/org.dash.platform.dapi.v0.Platform"