3 ms·
Not quite sure I get what's signing the request. Presumably if it's the client, it can be tampered with, so we're guessing that there's still an API layer sign
by ownagefool 6y ago
Not quite sure I get what's signing the request. Presumably if it's the client, it can be tampered with, so we're guessing that there's still an API layer signing things?
That said, I guess you could just add row / column ACLs to the database user, and then map the database user to the app user.
- lelanthran 6y ago> Not quite sure I get what's signing the request. Server sends the query so server can send the signature hash with it, so the server signs the query with the server's key and sends both query and signature. If the server ever receives a query without a signature or with a signature that is incorrect it can ignore or generate an error.