You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The mintTx endpoint is incredibly privileged operation. Right now, there's no restriction on interacting with that interface. This is unacceptable for a production-grade deployment.
Given the intended use-case this repository is exploring (unprivileged, non-custodied wallet providers), such an interface likely shouldn't/wouldn't actually exist in a productionized fork/recreation of this project. However, some variant of endpoint authentication would not go amiss, to make sure no one gets the wrong idea.
Note: this also requires some level of authentication to be present in the running equivalent of opencbdc-tx because authentication of privileged operations should be strict and verified (at least) at the boundaries of the security perimeter (which this repository sits outside).
The
mintTx
endpoint is incredibly privileged operation. Right now, there's no restriction on interacting with that interface. This is unacceptable for a production-grade deployment.Given the intended use-case this repository is exploring (unprivileged, non-custodied wallet providers), such an interface likely shouldn't/wouldn't actually exist in a productionized fork/recreation of this project. However, some variant of endpoint authentication would not go amiss, to make sure no one gets the wrong idea.
Originally posted by @anders94 in #6 (comment)
The text was updated successfully, but these errors were encountered: