Safely unspoofed contextual info through MQTT PubSub
Open
area:ff-expert
time:TBD
- Dominant language
- JavaScript
- Stars
- 400
- Forks
- 89
- Avg merge
- 1d 21h
- Merged PRs (30d)
- 146
Description
Parent: #6918
Deliverable: FlowFuse/product#64
Without Forge in the middle, contextual info (user ID, team ID, instance ID) could be spoofed by front-end clients. Establish how to safely verify context server-side.
Contributor guide
Assessment
This issue has not been assessed yet.