Читаю доку по крону в gae: Validating cron requests You might want

Question

Читаю доку по крону в gae: Validating cron requests You might want

to validate that requests to your cron URLs are coming from App Engine and not from another source. You can do so by validating an HTTP header and the source IP address for the request:

Requests from the Cron Service will also contain a HTTP header:

X-Appengine-Cron: true
The X-Appengine-Cron header is set internally by Google App Engine. If your request handler finds this header it can trust that the request is a cron request. The X- headers are stripped by App Engine when they originate from external sources so that you can trust this header.

По-моему кто угодно может сделать реквест с X-Appengine-Cron хэдером, не?
тип, это не очень секьюрно

#backend #programming #python #russian

0

20.07.2019

1 ответов

2 просмотра

Andrey · Accepted Answer

Andrey

Они же пишут, что режут внешние.

0

20.07.2019

170 похожих чатов

Читаю доку по крону в gae: Validating cron requests You might want

1 ответов

Похожие вопросы