outline-server
outline-server copied to clipboard
Jigsaw-Code
Access key per device or one session per access key
Hello All,
is there anyway even third party solution to restrict access key per device or to have one session per access key .
I know this feature request is complex, but I have a suggestion. @fortuna Is it possible to instead add a feature to when a new access key is created we could give it a limited availability, like only valid for 30 mins. After that the device that connected to the server during that 30 minutes window will be authorized to use that access key but any new devices during or after that time frame get automatically rejected.
Whats Going On ? Im Waiting 4 This Feture Too But Nothing Happen And I Know Some One Make Limit On ip Connection But I Dont Khow How
Hello, I would like to know when you will add this feature, we have been waiting for years. Thank you.
@hosseinnoob I know how to limit 1 IP per access key but I want limit 1 connection per access key
The easiest way to restrict multiple using - collect mac of device and put it into key model. client can send this info on first connection.
@alexlii1971 Yes (see here). This feature request is instead about restricting each key to a single device, not necessarily limiting the amount of data used by each key.
The main development here is the introduction of Dynamic Keys/Online Config: https://www.reddit.com/r/outlinevpn/wiki/index/dynamic_access_keys/
That can enable providers provide a different key in every session. This way sharing a key will effectively break it.
It's out!
Hi @daniellacosse, Where? which version number? I cannot see it!
Check out the wiki: https://www.reddit.com/r/outlinevpn/wiki/index/dynamic_access_keys/
@daniellacosse @fortuna Using the dynamic access key isn't a good idea to prevent sharing access keys or restrict keys per devices,since user can open dynamic urls as http(s) url and generate static access key based on json output.
Hey, guys. Could someone tell me how can restrict access key per device via dynamic keys? I've implemented dynamic keys feature for my clients but I don't understand how to restrict access key per one connection.
Hey @Beniamiiin - you'd effectively have to write a service that calls our Management API to generate a static key and returns it for each user that connects to your dynamic key service. In that service you'd need to store a mapping of IPs/User Agents to keys generated somewhere to avoid regenerating keys for the same client.
I know that's a lot of work, but the end result is you now have one key that you can give everyone.
@daniellacosse thanks for the response. But how does this help me solve the issue of people buying one key and then using it on multiple devices? I thought dynamic keys can help with it.
Also, I tried to get user ip and user agent from the request and I got the same result despite the fact that requests for connections to vpn were made from different devices (iPhone).
@Beniamiiin do you mind sending the request headers you're getting from the different devices?
@daniellacosse I made a mistake when I told you that I got the same information from the both connections. I tried one more time and got the expected result. But this information unfortunately don't help me to restrict of sharing one key or I don't understand something.