Logo

dev-resources.site

for different kinds of informations.

Turning a Customer Security Concern into a Feature

Published at
12/10/2024
Categories
todayilearned
webdev
programming
security
Author
lincemathew
Author
11 person written this
lincemathew
open
Turning a Customer Security Concern into a Feature

We are working on developing a product called LiveAPI, a product for creating automated API docs for any project within minutes and with just a few clicks.

how it works

We are solving many complex problems to convert the idea into a usable product. In this post, I will explain how we are trying to solve a complex problem in our product.

While discussing the idea of LiveAPI with founders and developers, one main concern they kept asking about was the security of the product.

LiveAPI generates API docs directly from GitHub, GitLab, or self-hosted repositories. This requires users to link their GitHub, GitLab, or any other git provider account to LiveAPI.
git providers

As we are a new product with minimal users, people might hesitate to connect their repository or share code with LiveAPI to generate API documentation.

We discussed this problem in the team and came up with the idea of the LiveAPI Runner.

The LiveAPI Runner will act as an agent between the LiveAPI backend and the client. The LiveAPI Runner is a mini-tool that users can install on their own self-hosted server.
For each user, they can enable the LiveAPI Runner and simply install it using a one-line command.

LiveAPI Runner

Using the Runner, users can clone the repositories on their own platform and share the important files with the LiveAPI backend to generate documentation.
Also, they can monitor what files LiveAPI is reading to generate documentation. This will provide complete transparency and clarity on how we are dealing with the user's repository.

Curious about how we implemented this Runner? More details and challenges will be discussed in Part 2.

todayilearned Article's
30 articles in total
Favicon
My First Post and Introduction
Favicon
Guess what? You can make a game inside a PDF!
Favicon
TIL: Tag Function / Tagged Template Literals
Favicon
update notepad++
Favicon
TIL: Styling Obsidian text paragraphs
Favicon
Today I Learned...
Favicon
Outlook tìm mail nhận trong khoảng thời gian xác định
Favicon
TIL: using --no-deps with docker compose
Favicon
TIL: LIFO Solution and Regular Exprresion Techniques【CodeWars】
Favicon
Scrum Fundamentals Certification (SFC) | Study Notes - Part I: Introduction
Favicon
Downloading the same file 102+ times
Favicon
Build Golang from Source for v1.23+
Favicon
3 Myths, 3 Facts, and 3 Strategies to Scale Node.js Apps
Favicon
How to Validate Inputs Using Only HTML
Favicon
Turning a Customer Security Concern into a Feature
Favicon
Opposite Colours Tool
Favicon
Work Life Balance
Favicon
Is This a Good Way to Reduce Operational Costs?
Favicon
TIL: How to Trim Trailing Zeros【CodeWars】
Favicon
Why 1% - 1% Isn't Zero in Your Calculator (And What It Really Means)
Favicon
What I’ve Learned from Building a Calculator with Vue.js
Favicon
Starting to Rust
Favicon
TIL C11 Annex K exists but you shouldn't use it
Favicon
Be careful with join type typos
Favicon
The Role of AI in Financial Services: Opportunities and Challenges
Favicon
Starting to Rust
Favicon
Getting Started with the TMDB API: A Beginner's Guide
Favicon
TIL emalloc() auto-exits on out-of-memory errors
Favicon
TIL: How To Use the Specification Pattern in C# To Simplify Repositories
Favicon
Devops Foundation - Day1

Featured ones: