Skip to content

Conversation

@CaptainAril
Copy link
Contributor

closes #5

Copy link
Contributor

@Ifechukwu001 Ifechukwu001 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The whole thing is okay.
I was also thinking about the security of the broker, Mr Ebuka used hashing to hash the message, if we use that, then you need to look into a custom decoder for the RabbitMQ. or maybe a different approach of using headers.

"faststream[rabbit]>=0.5.39",
"starlette>=0.46.2",
"uvicorn>=0.34.1",
"django-extensions>=4.1",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is the use of the django extensions package?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also remove the pika, It was an oversight from me, it's not a dependency again

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What is the use of the django extensions package?

It is for listing all exposed django endpoints. run as manage.py show_urls
Comes in handy especially when there's no swagger docs

user, {"is_active": True, "is_enabled": True, "is_validated": True}
)
user_data = {"id": user.id, "email": user.email}
queue = "validate-user"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same magic string comment

@CaptainAril
Copy link
Contributor Author

The whole thing is okay. I was also thinking about the security of the broker, Mr Ebuka used hashing to hash the message, if we use that, then you need to look into a custom decoder for the RabbitMQ. or maybe a different approach of using headers.

I checked. He is not really hashing the message. Just adds a signed key, that is validated at the consumer end. Similar with what we did for request headers. Should we stick with that or do we actually encrypt the message?

@Ifechukwu001
Copy link
Contributor

The whole thing is okay. I was also thinking about the security of the broker, Mr Ebuka used hashing to hash the message, if we use that, then you need to look into a custom decoder for the RabbitMQ. or maybe a different approach of using headers.

I checked. He is not really hashing the message. Just adds a signed key, that is validated at the consumer end. Similar with what we did for request headers. Should we stick with that or do we actually encrypt the message?

Yeah It's fine to use headers.

1 similar comment
@Ifechukwu001
Copy link
Contributor

The whole thing is okay. I was also thinking about the security of the broker, Mr Ebuka used hashing to hash the message, if we use that, then you need to look into a custom decoder for the RabbitMQ. or maybe a different approach of using headers.

I checked. He is not really hashing the message. Just adds a signed key, that is validated at the consumer end. Similar with what we did for request headers. Should we stick with that or do we actually encrypt the message?

Yeah It's fine to use headers.

@Ifechukwu001 Ifechukwu001 merged commit 92e3c9d into Developer-s-Foundry:main Apr 29, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

User Registration

2 participants