finos/traderX

Consider Login-requirement / authentication to protect TraderX Demo Environment

Open

#131 opened on Mar 8, 2024

View on GitHubContributor guide
 (13 comments) (0 reactions) (1 assignee)Shell (144 forks)auto 404
enhancementhelp wanted

Repository metrics

Stars
 (104 stars)
PR merge metrics
 (PR metrics pending)

Description

Feature Request

Description of Problem:

Do we want the traderx demo to be 100% open? This may cause bad actors to exploit the unauthenticated tool to inject offensive content, or other things, rather than just demonstrate the functionality.

Potential Considerations:

Does this create a barrier to exploration, or would people be hesitant? Is this difficult to implement? Do we want to do this?

Contributor guide

Research direction
Investigate lightweight authentication mechanisms (e.g., login form with session tokens) that can be added to the TraderX demo environment without overcomplicating the setup. Consider using a simple middleware or existing library that integrates with the current stack.
Tech stack
None
Domain
backendsecurity
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitBasic understanding of web authentication
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70