Add optional signing, domain verification, and path-scoped dynamic responses
Please describe your feature request:
Add three optional enhancements to dynamic responses, each independently toggleable: 1. Signed updates (HMAC): server verifies signature using a per-deployment secret/keypair. 2. Domain ownership gating: allow dynamic responses only for domains registered by the interactsh client. 3. Path-scoped updates: API to set/update responses for specific HTTP paths (optionally with wildcards) with TTLs.
These are disabled by default and can be enabled independently via config/flags (e.g., DYNAMIC_SIGNING=on + SIGNING_KEY=..., DOMAIN_VERIFICATION=on, DYNAMIC_PATHS=on).
Describe the use case of this feature:
• Security: prevent unauthorized edits when -dynamic is enabled; restrict usage to owned domains.
• DX & automation: set per-path payloads to simplify scripts and concurrent tests.
• Incremental adoption: fully backward-compatible; deployments can opt into any subset without changing current workflows.
I can create the PR myself, just want to make sure you are on board...
@realgam3 go for it
@realgam3 Thanks for the feature request! Let us know if you need any help while implementing this!
@realgam3 Thanks for the feature request! Let us know if you need any help while implementing this!
Thank you :) I will start working on it as soon as possible