Confirmed users
927
edits
Services/KeyExchange: Difference between revisions
Jump to navigation
Jump to search
→Server API
Tarek.ziade (talk | contribs) |
Tarek.ziade (talk | contribs) |
||
| Line 87: | Line 87: | ||
Every call must be done with a ''X-KeyExchange-Id'' header, containing a half-session identifier for the channel. This client ID must be a string of 256 chars. The server will keep track of the two first ids used for a given channel, from its creation to its deletion and will close the channel and issue a 400 if any request is made with an unknown id or with no id at all. | Every call must be done with a ''X-KeyExchange-Id'' header, containing a half-session identifier for the channel. This client ID must be a string of 256 chars. The server will keep track of the two first ids used for a given channel, from its creation to its deletion and will close the channel and issue a 400 if any request is made with an unknown id or with no id at all. | ||
Last, if a given IP attempts to | Last, if a given IP attempts to flood the server with a lot of calls in a short time, it will be blacklisted for 10 minutes return 403s in the interim for any requests made from the same IP. When receiving this error code, legitimate clients can fall back to a manual transaction. A client that generates a lot of bad requests will also be blacklisted, but for an hour. | ||
The server API knows four calls: | The server API knows four calls: | ||