lbryio / lbryio/lbry-android

Enable daemon authentication for all lbrynet-daemon requests

Open
#73 2 comments 0 reactions 0 assignees View on GitHub
type: improvement
Dominant language
Java
Stars
2.4k
Forks
110
PR merge metrics
No merged PRs in 30d

Description

**This ticket is out of date and should be updated to reflect upcoming IPC design**

The `use_auth` configuration setting should be set to `true` to make sure that all requests to the daemon are properly authenticated with a password stored in the app's private keystore. This will prevent third-party apps from being able to make calls to the daemon.

### Acceptance Criteria
1.
2.
3.

### Definition of Done
- [ ] Tested against acceptance criteria
- [ ] Tested against the assumptions of the user story
- [ ] The project builds without errors
- [ ] Unit tests are written and passing
- [ ] Tests on devices/browsers listed in the issue have passed
- [ ] QA performed & issues resolved
- [ ] Refactoring completed
- [ ] Any configuration or build changes documented
- [ ] Documentation updated
- [ ] Peer Code Review performed

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue says it is out of date and must be updated for the upcoming IPC design; start by clarifying that design and how lbrynet-daemon requests use the use_auth setting and the app's private keystore. Define concrete acceptance criteria, then verify authentication behavior, tests, build status, and documentation against them.

Written by the indexing model from the issue text.

Assessment

Tech stack
android, java
Domain
authentication, mobile
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.