-
Notifications
You must be signed in to change notification settings - Fork 49
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Complete call request #932
Conversation
@bugout-dev check
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't see a caller
check on the complete_call_request
endpoint. That seems to be a serious issue.
engineapi/engineapi/routes/metatx.py
Outdated
|
||
|
||
# @app.post("/requests/{request_id}/complete", tags=["requests"]) | ||
@app.post("/requests/complete", tags=["requests"]) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This should be /requests/<request_id>/complete
IMO
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The problem in whitelist_paths
, dynamic <request_id>
and our current implementation of authentification middleware. I tried to avoid making this over complicated changes so this is the only way to make this route public.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
How complex would it be to update our whitelist_paths
implementation?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A few comments.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm
Resolves #930
Resolves #929
For tests sig creation can be used tool: https://github.com/kompotkot/simple-signer