adsa95 / sirius-api Goto Github PK

View Code? Open in Web Editor NEW

0.0 0.0 0.0 250 KB

Web API and database meant to be used with kayex/sirius and adsa95/sirius-web

PHP 98.90% ApacheConf 0.55% JavaScript 0.55%

sirius-api's People

Contributors

Watchers

sirius-api's Issues

Support for HTTP extensions

Add support for submitting and handling HTTP extensions.

Extension JSON structure

Config

{
    "slack_token": "xoxp-234234234-23234234-234234324234234-2342343242433",
    "config": {
        "thumbs_up": {},
        "bad_words": {
            "strict": true
        }
    }
}

The presence of an EID (extension ID) key in the config object indicates that the extension should be enabled. The extension config is contained within the corresponding object value.

As posted by @adsa95.

Don't use Slack tokens in URL

We should probably not use Slack tokens as URL identifiers, as they are sensitive pieces of data that can accidentally be captured in request/routing logs etc.

Suggestions for alternate IDs to use?

The SHA256 hash of TeamID and UserID is very convenient for the sirius service since it can be fetched at any time using a Slack token only.

I can take responsibility for implementing this change (on both sides).

Recommend Projects