sandstorm-org / powerbox-http-proxy Goto Github PK

This could be handled at the platform level but could also probably be handled by the proxy: Sometimes an app like WordPress tries to talk to the same endpoint in several subsequent page loads. I may not want to lose the option by entering an invalid endpoint (see #1), but I shouldn't get endlessly spammed by requests for the same thing.

I propose the proxy should temporarily remember what endpoints it has requested and not gotten a capability for, and for the rest of the grain session should not re-request it. A user could restart the grain if they need access to something they've already rejected.

For Desert Atlas I disable urllib3 warnings to keep it from spamming the logs:

https://github.com/orblivion/desert-atlas/blob/3f8a5d0da9222258022a387ded313fc3e95ea5c8/server.py#L11

I actually tried to fix this at one point and couldn't quite figure it out. But iirc the cert is missing certain fields or something. To reproduce it just use urllib3 with powerbox proxy and it'll tell you more specifically what it was, and/or you can look up the warning message.

Per discussion in zenhack/ttrss-sandstorm#24, it would be useful to be able to tell powerbox-http-proxy to drop a capability for a given domain/url.