Alex O'Ree created JUDDI-686:
--------------------------------

             Summary: track and map requestors IP address to auth token
                 Key: JUDDI-686
                 URL: https://issues.apache.org/jira/browse/JUDDI-686
             Project: jUDDI
          Issue Type: Improvement
            Reporter: Alex O'Ree
            Assignee: Kurt T Stam
             Fix For: 3.3


basically, we can make auth token's a bit more secure by obtaining the 
requestor's ip address and store that along with the auth token (server side). 
upon validating an new request, we can then compare IP addresses. if they are 
different, invalidate the token and force reauthentication 



--
This message was sent by Atlassian JIRA
(v6.1#6144)

Reply via email to