Skip to content

Client validation when connecting Leader & Follower #102

@chmurson

Description

@chmurson

Context

It's a web app. So we shouldn't trust client in the first place. There is some validation built in the client side logic, but that can be skipped if someone prepares his own version of client.

What
Validation of client side. When connection between leader & follower is being setup, we could check for some token related to a build version; hash of js assets.

Thanks to that we will gain

  • some sense of extra security
  • ensuring all key holders are on the same version of client so no weird behaviour

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions