suddjian commented on issue #17187: URL: https://github.com/apache/superset/issues/17187#issuecomment-949935449
An alternative to this is issuing a "signing key" to the dashboard creator when they mark their dashboard as embeddable. Then rather than making an API call to Superset to get the signed url, the Host App would craft the embed url and sign it, and Superset would verify the signature. The signing key acts similarly to an API key but maybe we don't need a separate SIP for that if it's only part of this feature. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
