Show HN: Heartbeat – Transform REST Endpoints to Streaming APIs

Re:Show HN: Heartbeat – Transform REST Endpoints to Streamin... by SmellTheGlove on Wednesday August 03, 2016 @01:11PM (#12219580)

This is very cool, thank you for sharing. I wish I could demo, but my current work is such that I really can't expose my endpoints/data to a 3rd party (financial services/PII type work). That said, pretend I could provided we had appropriate security - tell me about the security involved.

[ Parent | on HN ]

Re:Show HN: Heartbeat – Transform REST Endpoints to Streamin... by sidi on Thursday August 04, 2016 @06:19AM (#12224558)

There are two parts:

1. Source API endpoint - Heartbeat fetches the data using the authentication supported by the source API (basic auth, security token in headers, URL query strings for example).

2. Heartbeat transformed endpoint - This is accessible over an HTTPS endpoint and is secured with a basic auth username:password key. As long as you use it within a secure environment (server code, or an internal network), there should be no problems. If you use it within a web app that's distributed to other users, they can see the key. However, this key is read-only and we will allow generating a new key from within the dashboard shortly.

[ Parent | on HN ]