RSS Feed/News Add API Key and OAuth2 client restrictions

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
24,664
Points
823

Reputation:

XenForo 2.3 allows to create API keys and configure the scopes they can be used for.

However it is not possible to restrict them to specific IP addresses or specify a start and / or expiry date.
Being able to restrict API keys in such a way could strenghten security, especially if the API is used to connect other (internal) services / apps.

XenForo 2.3 will add OAuth2 clients that will also use API scopes.

I therefore suggest to make it possible to restrict API keys and OAuth2 clients to...

Read more

Continue reading...
 
Status
Not open for further replies.
Top