Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feature: ability to optionally specify an Authorization token in a file #662

Open
dolled-possum opened this issue Jan 7, 2025 · 0 comments
Labels
enhancement New feature or request

Comments

@dolled-possum
Copy link
Collaborator

RPCs are frequently displayed in the clear and can be abused with unauthorized usage. This is especially an issue where the RPC is a communal resource.

Adding the ability to optionally specify an Authorization token in a file would be useful. The kinode user could specify a filename such as my_token.json which could contain the text [{"rpc":"my-rpc.ws-prox-fra1.staging.kinode.net","headers":[{"header":"Authorization","value":"my_secret_token"}]}]. Then launching a kinode with --rpc my-rpc.ws-prox-fra1.staging.kinode.net --rpc-header-file my_token.json would pass the header Authorization: my_secret_token when initiating the web socket connection (this json format would allow the specification of multiple headers for multiple RPCs, but perhaps it would be simpler to assume support only for the RPC specified by --rpc, and then the values would be preserved in .eth_providers for future use). By only referencing file names, the secure information would not be visible in process lists or lists of RPC URLs.

@dolled-possum dolled-possum added the enhancement New feature or request label Jan 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant