OpenSparrow v3.6 Launches External API Module with Encrypted Read-Only Keys
Open-source platform OpenSparrow has released version 3.6, introducing an External API module that allows administrators to expose selected database table data to external services. Each API key is tied to a specific table, a fixed set of columns, server-side filters, and a row limit, ensuring external callers cannot influence what data they receive. Keys are stored encrypted with HMAC-based lookup and are displayed only once upon generation, never retrievable from the browser afterward. The single endpoint at public/api/external.php handles Bearer token authentication and enforces per-key and per-IP rate limiting, returning standard HTTP error codes for invalid or disabled keys. All successful requests are logged in a new system table, giving admins visibility into key usage, while the update requires no database migration or configuration changes.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.


Discussion (0)
Log in to join the discussion and vote.
Log in