From 94e7a0a3c106b1ee1b90a0f45fee582096788d42 Mon Sep 17 00:00:00 2001 From: Mitchell Hashimoto Date: Tue, 27 Mar 2018 10:09:13 -0700 Subject: [PATCH] agent: add TODO for verification --- agent/agent_endpoint.go | 3 +++ 1 file changed, 3 insertions(+) diff --git a/agent/agent_endpoint.go b/agent/agent_endpoint.go index 20cb047b2..a6b67816d 100644 --- a/agent/agent_endpoint.go +++ b/agent/agent_endpoint.go @@ -940,6 +940,9 @@ func (s *HTTPServer) AgentConnectAuthorize(resp http.ResponseWriter, req *http.R return nil, acl.ErrPermissionDenied } + // TODO(mitchellh): we need to verify more things here, such as the + // trust domain, blacklist lookup of the serial, etc. + // Get the intentions for this target service. args := &structs.IntentionQueryRequest{ Datacenter: s.agent.config.Datacenter,