Konrad
September 18, 2021, 4:29pm
1
Does overwolf sign events in anyway so it can be verified on our side? If not, does Overwolf return original Match ID e.g. in case of League of Legends so it can be further verified using Riot API?
Feature Description:
It would be amazing if Overwolf signed API responses and events.
Currently, it is fairly easy for a malicious user to send your app fake data by inspecting & modifying the source code. This is an inherit risk with any browser base front end. Most of the time this is completely fine. If someone sends your app fake events or data, it will only affect their session.
However, if the data from their client is shared or stored as part of your functionality, this becomes a prob…
Our events are not signed, but you can use the match ID to compare the data integrity later with the RIOT API data (after the game is over of course).
Thanks.