dylan/vod-system
1
1
Fork 0
Code Issues 16 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

fix(streaming): no authentication on stream management endpoints #2

New Issue
Open
opened 2026-06-20 01:33:35 +01:00 by dylan · 0 comments
dylan commented 2026-06-20 01:33:35 +01:00
Owner
Copy Link
  • The stream_start, stream_stop and stream_heartbeat do not require any authentication to execute except knowing a stream key
  • The chances of someone guess a stream key (24 bytes) is low, but the auth around these endpoints should be improved
- The `stream_start`, `stream_stop` and `stream_heartbeat` do not require any authentication to execute except knowing a stream key - The chances of someone guess a stream key (24 bytes) is low, but the auth around these endpoints should be improved
dylan changed title from No authentication on stream management endpoints to fix(streaming): no authentication on stream management endpoints 2026-08-13 13:43:21 +01:00
dylan added this to the (deleted) project 2026-08-18 14:31:59 +01:00
dylan moved this to To Do in Pre-release Security Hardening on 2026-08-18 14:32:06 +01:00
dylan moved this to Backlog in Pre-release Security Hardening on 2026-08-18 14:32:07 +01:00
dylan added this to the Security Hardening milestone 2026-08-18 14:39:16 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
epic
high-priority
No Label
Milestone
No items
No Milestone Security Hardening
Projects
Clear projects
No project
Assignees
Clear assignees
dylan
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dylan/vod-system#2
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?