Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API Token Fixes #218

Merged
merged 4 commits into from
Sep 12, 2019
Merged

API Token Fixes #218

merged 4 commits into from
Sep 12, 2019

Conversation

yeastplume
Copy link
Member

@yeastplume yeastplume commented Sep 11, 2019

Addresses all known outstanding Auth issues: #183, #203, #93

On release, users may have to re-organize their API tokens, this needs to be clearly stated in release notes along with instructions. Notes are:

  • Upon wallet creation, the wallet now creates 2 authentication tokens in the wallet directory: .api_secret and .owner_api_secret
  • .api_secret is the secret shared with the node for wallet to node communication. Previous versions used this file for both node communication and Owner API authentication. This file should now only be used for the node secret and users should update files and paths in grin-wallet.toml accordingly
  • .owner_api_secret is now used only to authenticate the Owner API.
  • In grin-wallet.toml, api_secret_path corresponds to the Owner API secret file (.owner_api_secret by default), while node_api_secret_path corresponds to the node secret file (.api_secret by default)
  • When running the Owner and Foreign APIs on the same port via the owner_api_include_foreign option in grin-wallet.toml, calls to the Foreign API no longer require the Owner API authentication secret.

@yeastplume yeastplume merged commit 26ad378 into mimblewimble:master Sep 12, 2019
@yeastplume yeastplume deleted the api_token_fixes branch October 21, 2019 12:45
yyangli pushed a commit to mwcproject/mwc-wallet that referenced this pull request May 13, 2020
* split api secret into owner_api secret and node api secrets

* update for master, drop requirement for authentication for foreign api when run on same port as owner api

* rustfmt

* re-trigger build
antiochp pushed a commit to antiochp/grin-wallet that referenced this pull request Aug 7, 2020
* split api secret into owner_api secret and node api secrets

* update for master, drop requirement for authentication for foreign api when run on same port as owner api

* rustfmt

* re-trigger build
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant