Skip to content
This repository has been archived by the owner on Sep 22, 2021. It is now read-only.

Use redis for address linking token #600

Open
Tbaut opened this issue Apr 3, 2020 · 1 comment · May be fixed by #1007
Open

Use redis for address linking token #600

Tbaut opened this issue Apr 3, 2020 · 1 comment · May be fixed by #1007
Labels
i-1-security i-7-refactor s-2-auth-server

Comments

@Tbaut
Copy link
Collaborator

Tbaut commented Apr 3, 2020

No description provided.

@Tbaut Tbaut added this to the v0.4 milestone Apr 3, 2020
@Tbaut Tbaut mentioned this issue Apr 17, 2020
Closed
@Tbaut Tbaut removed this from the v0.4 milestone Apr 22, 2020
@Tbaut
Copy link
Collaborator Author

Tbaut commented May 20, 2020

I figured out an attack vector if users send tons and tons of address linking requests. Our addressLinkStart would fill the DB without asking anything else.

So this issue is also about security :)

@niklabh niklabh linked a pull request Aug 28, 2020 that will close this issue
Open
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
i-1-security i-7-refactor s-2-auth-server
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Switching LRU mode in redis for keys eviction on max memory usage paritytech/polkassembly
1 participant
@Tbaut