Hi all, I was trying out calling functions over REST and I noted that calling a particular function (supplying the right input data) using https://[hostname]/v1/functions/{functionId}/executions will cause the server to return the full list of executions ever done! This is clearly not ideal as the no. of executions will only grow and the calling program gets to "see" all the previous responses (security issue).
I know this does not happen if I'm calling using e.g. the Flutter SDK but I would need a corresponding solution when I use REST.
Anyone got some tips for me?
What's the Execute Access in Settings Tab?
"Any"
You should set relevant execute access.
You see all these executions and other details of using Any. This means everyone can fire up your function.
Also, are you using api key when using REST?
I was just doing some initial tests so yes, I was using an API key (so as not to bother copying and pasting the session cookie)
OK, lesson learnt - do not use API key even if just testing.
Also, you were calling List Exeuctions so this is expected
[SOLVED] Function executions
Recommended threads
- Excessive usage of cloud functions is sl...
I have made almost all my requests through cloud functions and jwt , due to security fears of a user editing a field he is not supposed to . This unfortunately...
- Dart Runtime as Function is missing
Hey guys, I set the _APP_FUNCTIONS_RUNTIMES to dart-3.10 and redeployed the appwrite stack but unfortunately the dart runtime doesnt show up. I copied the val...
- Go 1.25 runtime
So I'm trying to use go 1.25 for my functions and I can only find go-1.23 as a function runtime. So I did some searching and found https://github.com/appwrite/a...