Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance security in backend server #13

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

HendricksJudy
Copy link

Add input validation, error handling, rate limiting, and authentication to the Flask application, and update the Dockerfile to use a non-root user.

  • Flask Application (sam2/demo/backend/server/app.py)

    • Add input validation and error handling in the propagate_in_video function.
    • Implement rate limiting using Flask-Limiter for API endpoints.
    • Implement authentication using Flask-HTTPAuth for API endpoints.
    • Add security headers using Flask-Talisman.
    • Protect routes with authentication and rate limiting.
  • Dockerfile (sam2/backend.Dockerfile)

    • Create a non-root user and switch to it for running the application.

Add input validation, error handling, rate limiting, and authentication to the Flask application, and update the Dockerfile to use a non-root user.

* **Flask Application (`sam2/demo/backend/server/app.py`)**
  - Add input validation and error handling in the `propagate_in_video` function.
  - Implement rate limiting using Flask-Limiter for API endpoints.
  - Implement authentication using Flask-HTTPAuth for API endpoints.
  - Add security headers using Flask-Talisman.
  - Protect routes with authentication and rate limiting.

* **Dockerfile (`sam2/backend.Dockerfile`)**
  - Create a non-root user and switch to it for running the application.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant