The download of cluster-backup is served by api-server from a static file protected by a random string. The cluster backup is encrypted with GPG and a secret password. Enhance the cluster-backup file protection with a JWT-based authorization, as it happens for other api-server API calls.
See https://github.com/NethServer/ns8-core/blob/main/core/imageroot/var/lib/nethserver/cluster/actions/download-cluster-backup/60link
The download of cluster-backup is served by api-server from a static file protected by a random string. The cluster backup is encrypted with GPG and a secret password. Enhance the cluster-backup file protection with a JWT-based authorization, as it happens for other api-server API calls.
See https://github.com/NethServer/ns8-core/blob/main/core/imageroot/var/lib/nethserver/cluster/actions/download-cluster-backup/60link