FilePicker.io security - Is API Key required when using policy and signed policy -
i have security question regarding using pick widget.
i had assumed if supplied data-fp-signature , data-fp-policy not need supply api key.
when don't supply api key following javascript error "uncaught filepickerexception: api key not found"
i have verified generated policy , signed policy match filepicker.io test harness.
the api key necessary letting filepicker.io - policy , signature ways of verifying ware, have indicate in first place api key (for instance, can security secret , verify signature hash correct)
Comments
Post a Comment