Joost Farla

Security proposal: trusted services and shared secrets / request signing

4

In the file sharing context, security is a serious concern. Therefore, it's a best practice to keep your [attack surface](https://en.wikipedia.org/wiki/Attack_surface) as small as possible. There are various measures to take...

Resending cookies should be unnecessary

3

The current documentation states: > To work together with load-balanced environments consumers SHOULD resend any cookies as defined in RFC 6265. As stated in the “Authentication” section any Basic Auth...

The documentation provides a clear description of how responses are structured: > A OCS response MUST consist of the following elements: > > `ocs`: Array that contains the whole response...

Add option to dynamically set Access-Control-Allow-Origin header

6

As discussed with @chadkouse in https://github.com/joostfarla/serverless-cors-plugin/issues/1. When providing authenticated requests with the [`withCredentials`](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/withCredentials) option, CORS requires you to set a specific host in the Access-Control-Allow-Origin header. CORS doen not allow...

Mapping converter not applied for `ReactiveMongoTemplate::findAndReplace`

3

I have registered a `MappingMongoConverter` component to perform custom conversions for all document reads and writes. When performing `find` / `findOne` / etc. operations, this works as expected. However, when...

Part 5: Application schema discovery for profiles

2

## Current situation - Multiple variants share the same media types `application/json` and `application/geo+json` - Profiles are introduced to flag additional semantics for a variant (constraints, conventions, extensions) - Multiple...