GoogleCloudPlatform / GoogleCloudPlatform/dialogflow-integrations
Enable Twilio request validation for Twilio Proxy
Open
- Dominant language
- JavaScript
- Stars
- 286
- Forks
- 547
- PR merge metrics
- No merged PRs in 30d
Description
Twilio supports HTTP Basic and Digest Authentication but not Bearer [1], as required for Cloud Run.
This means users have to allow unauthenticated requests to use the Twilio Proxy.
Can we enable request validation [2] to reduce the security impact of this?
[1] https://www.twilio.com/docs/usage/security#http-authentication
[2] https://www.twilio.com/docs/usage/security#validating-requests
Contributor guide
Assessment
This issue has not been assessed yet.