i-am-nut / certificates-generator-system Goto Github PK

Following the principles of CRAB (Create, Retrieve, Append, Burn) of BigChainDB.

https://blog.bigchaindb.com/crab-create-retrieve-append-burn-b9f6d111f460

There needs to be a way to allow only specific users to perform CREATE and leave all the client users to perform TRANSACTION by default, that's the way certificates will be generated by now.

One choice is to set at the API routes somehow that only the hardcoded private keys can make a request to that route and so that perform a CREATION, thus preventing users from creating fake assets and messing with the system.