With the light of OpenCloud, comes more and more services for tasks that could've been done before, but at the root level.
Right now you can do authentication with a ASP.NET Forms Cookie which is dangerous as it gives root level access to your Roblox user with no restrictions.
What this issue aims to enact is to support authentication via ApiKeys within the new OpenCloud DataStores Service (gamepersistence-service-bedev2).
It should be implemented by determining if the given string on AuthenticationHelper is actually a forms cookie or an apiKey format. If it's an apiKey then we can't really check universe ownership (yet) so you'll have to ensure you have permissions to the universe you are trying to access as the methods will just throw. If we are using OpenCloud authentication, GlobalDataStore and DataStore2 will swap data providers to the OpenCloudProvider while still attempting to ensure data integrity and contract behaviour.
This change will also come fourth to the newest feature set to be added which is to drastically improve the code readability and self documentation.
More to come!
With the light of OpenCloud, comes more and more services for tasks that could've been done before, but at the root level.
Right now you can do authentication with a ASP.NET Forms Cookie which is dangerous as it gives root level access to your Roblox user with no restrictions.
What this issue aims to enact is to support authentication via ApiKeys within the new OpenCloud DataStores Service (gamepersistence-service-bedev2).
It should be implemented by determining if the given string on AuthenticationHelper is actually a forms cookie or an apiKey format. If it's an apiKey then we can't really check universe ownership (yet) so you'll have to ensure you have permissions to the universe you are trying to access as the methods will just throw. If we are using OpenCloud authentication, GlobalDataStore and DataStore2 will swap data providers to the OpenCloudProvider while still attempting to ensure data integrity and contract behaviour.
This change will also come fourth to the newest feature set to be added which is to drastically improve the code readability and self documentation.
More to come!