Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add a controller to force refresh #41

Open
iay opened this issue Jan 4, 2017 · 2 comments
Open

add a controller to force refresh #41

iay opened this issue Jan 4, 2017 · 2 comments
Assignees
@iay
Labels
enhancement

Comments

@iay
Copy link
Owner

iay commented Jan 4, 2017

For some applications, it would be nice to have an endpoint to poke to force a refresh.
@iay iay added the enhancement label Jan 4, 2017
@iay iay self-assigned this Jan 4, 2017
@trscavo
Copy link

trscavo commented Jan 4, 2017

How would access to that endpoint be managed?

@iay
Copy link
Owner Author

iay commented Jan 4, 2017

Excellent question, you definitely wouldn't want just anyone to poke it any time they wanted to, that would be a horrible denial of service issue.

I can think of two relatively simple options:

  • An IP protection system similar to that used by the Shibboleth IdP configuration for sensitive endpoints.
  • Some sort of secret token that is part of the configuration, as is used in things like GitLab

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@iay iay

Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@iay @trscavo