Add session validation
Nobody has claimed this yet.
- Dominant language
- C++
- Stars
- 47
- Forks
- 29
- Avg merge
- 5d 6h
- Merged PRs (30d)
- 3
Description
@SolidWallOfCode has mentioned that it would be helpful if Proxy Verifier had the ability to verify certain properties of the session. He mentioned specifically wanting to verify the ip address of the session. Here are other possible properties to validate:
- Validate the ip protocol (v4 or v6)
- Validate the HTTP protocol (HTTP/1 or HTTP/2)
- Validate whether the connection is secured via HTTPS.
This would be server side session validation since the client itself connects according to its own parameters. Currently, verifier-server does no session validation against the way the proxy connects to it. This issue records the desire to be able to do such validation against the way the proxy connects to verifier-server.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the verifier-server entry point and inspect how it currently handles the proxy connection and session. Determine how YAML or JSON configuration should express IP, IP protocol, HTTP protocol, and HTTPS validation. Done means verifier-server enforces the requested session properties and rejects connections that do not match.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- backend, networking
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100