supertokens-core
supertokens-core copied to clipboard
`Host`s Whitelist
🚀 Feature
It would be really awesome if SuperTokens Core supported a whitelist for hosts that could interact with it.
Example: Someone has a standalone Web App that hosts everything -- including their databases, SuperTokens Core, etc. It would be helpful for security reasons if we could tell SuperTokens Core to accept requests only from localhost
. :smile:
Implementation Details
Perhaps something like an allowed_hosts
option could be added to the config.yaml
file? :thinking: :thought_balloon: