Ian Denhardt

I guess we could add the information to the response types in web-session.capnp, and then have the bridge handle it.

Maybe I wasn't super clear. The idea would be, we'd first add fields to the `Response` struct: https://github.com/sandstorm-io/sandstorm/blob/93d80ac4bf2ca721f239fb58395a32970f92e953/src/sandstorm/web-session.capnp#L229 ...for each of the csp sources we want apps to be able...

Quoting John Dougan (2022-05-31 21:15:20) > (github) and I had to change BASE_URL to the IP based URL. That let me > set up github auth again, but I couldn't...

Throwing in `current-date` would unduly defeat caching. Ideally we could even do `Cache-Control: immutable` for these resources. The hashing idea is not bad, though I think you want a MAC,...

We'd actually probably want to do authenticated encryption, so we could also get a plaintext back that tells us what package to serve based on the hostname. One minor gap...

Though, we could skip the crypto entirely by just storing a random value in the package table in the database, and looking it up.

16.04 is indeed very old -- old enough to be out of support, even for an LTS release (canonical's window for those is 5 years). So you will probably want...

...also I wonder if maybe we should replace the shelling out to curl with using kj's http libraries, just to get rid of a system dependency.

Re: the original graph, I think *nothing* should happen to it -- I don't think this even interacts with the access stuff. For the original owner, my instinct is we...

So the other weird thing is that permissions are actually per UiView, not per grain. It probably would be easier to just have a dropdown for the role to assign...