Page MenuHomePhabricator

Add IP whitelisting capabilities to Main API
Closed, ResolvedPublic8 Estimated Story Points

Description

We need to create the ability to whitelist and IP address and assign a particular user to that address, the user configuration and the IP range addresses should be received through environment variables, so that we can add IP based access to our API(s).

Acceptance criteria
We have the ability to whitelist an IP range and associate a particular user with it in our API(s).

ToDo

  • create a middleware in httpuitls package
  • apply the same whitelisting as we have in v1 for WCS (look at the IaC repository for values)
  • deploy and test all of this on our v2 infrastructure
Things to consider:

This is the current implementation of the whitelisting, we want to make something similar but in a separate middleware.

Event Timeline