You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When using jupyverse to serve a Voilà dashboard instead of a Jupyter notebook, we should be careful about not activating FPS extensions that would give too much privileges
Proposal:
upon starting an instance of Jupyverse, list all active routes grouped by FPS extension in a rich fashion from the OpenAPI spec.
This may prevent some unintended exposures of insecure end points.
Eventually, a tool for displaying OpenAPI specs in the console could be a separate package (RichAPI?) and a useful utility beyond jupyverse.