authentication for requests
Data Storage API is open to internet and there is no authentication for POST, PUT, DELETE requests. Before we release, this feature should be implemented or we should close Data Storage API to internet.
CHange and addition of (raw)data should be only possible for authorized entities.
We should also have authorization with rate limiting, for especially for get requests considering different cases
- our own processes for mapping
- outside user of data for ML etc
- malicious requests such as DDoS
Edited by Volker Hofmann