Page MenuHomePhabricator

Create a password system for the dead links logging API
Closed, ResolvedPublic2 Estimated Story Points


We should create a simple password system so that it isn't trivial to pollute the dead link fixing log with bogus data. This can probably just be a password that is required to be submitted along with the API requests. The password can be stored in a config file and shared with the bot owners that we want to use the log. This isn't foolproof from a security perspective, but this isn't a tool that needs ironclad security (it's just a logging interface for the Internet Archive to keep track of progress with).

If the API actually proves useful, we can add an OAuth layer later.

Event Timeline

Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald Transcript
Niharika set the point value for this task to 2.
DannyH triaged this task as Medium priority.Mar 1 2016, 6:24 PM

Done. The logging link won't work without the password now.