mirror of
https://github.com/bolkedebruin/rdpgw.git
synced 2026-03-27 14:36:36 +00:00
Make sure to validate the client's ip address
This commit is contained in:
@@ -25,7 +25,7 @@ Connect integration enabled by default. Cookies are encrypted and signed on the
|
||||
on [Gorilla Sessions](https://www.gorillatoolkit.org/pkg/sessions). PAA tokens (gateway access tokens)
|
||||
are generated and signed according to the JWT spec by using [jwt-go](https://github.com/dgrijalva/jwt-go)
|
||||
signed with a 512 bit HMAC. Hosts provided by the user are verified against what was provided by
|
||||
the server.
|
||||
the server. Finally, the client's ip address needs to match the one it obtained the token with.
|
||||
|
||||
## How to build
|
||||
```bash
|
||||
|
||||
Reference in New Issue
Block a user