You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently OSv REST apis provided by httpserver module can be used in all or nothing mode only.
It would be nice for security reasons to limit API to read-only subset (GETs) so that no state modification is possible. In general it should be possible to somehow customize set of available API. Also it would be nice to restrict what part of filesystem file API could access.
One way (static option) to accomplish this could done by enriching httpserver API code with preprocessor #if defined(OS_REBOOT_API_ENABLED) type of expressions. Another way (dynamic option) would be to use some kind of API configuration file specifying what APIs are enabled.