Add security doc

uphold · Jan 28, 2025 · 61b6427 · 61b6427
1 parent 924122f
commit 61b6427
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/docs/security.md b/docs/security.md
@@ -0,0 +1,13 @@
+---
+sidebar_position: 14
+---
+
+# Security
+
+Security guidelines when integrating Topper:
+
+- **Signing keys**: Never expose or share your signing keys. If compromised, bad actors can use them to initiate sessions on your behalf.
+
+- **Validate Requests**:  Always validate the IP address and origin of incoming requests on your backend to ensure they are from trusted sources and mitigate potential fraudulent activity.
+
+- **Implement CORS**: Use CORS headers to restrict your API’s access to trusted domains, providing an additional layer of security against unauthorized requests.