API service

[slim finch]

a service that is a "API"(or interface/RPC etc.).
has a new lib, for example api.so.
use shell.connect_service to get a api object, require no username or password, only ip, port and service type.
on the server, there is a service.bin, player write OnConnect function in it, that returns a map.
in this map, players write methods that can be executed.
when a player calls a method in the api object, code in it executes as it was executed on the remote server, as root permission.

[slim finch]

this may seem imba but actually not, no one seems to have any idea about this tho

[slim finch]

oh, the OnConnect function can have arguments, for example three arguments would be client public ip, username and password provided in shell.connect_service. again, this user pass shouldnt be required, but if the api owner wants to do sth with it(for example use it as a key) they can.

methods returned from OnConnect function should act like they were executing from the remote server, which means they have their own locals, globals and outer scope. exit, errors and shell.start_terminal should not exit the user program. on those cases the method returns null.

[warped stratus]

This is already possible tho with custom object and shell.launch

Youd just need to make a wrapper and it would work as seemlessly as you described

[slim finch]

i know. this isnt the point

[warped stratus]

but why would anyone prefer importing a library over including code at compile time and then using that?

[slim finch]

user would prefer api service over import_code and getting source code hacked

service provider would also prefer api service because more user will trust them. if everyone is using a safer way for user, people that doesnt use doesnt get trusts

[warped stratus]

yeah but just make the library open source? There's no reason not to not like you'd need to store coin credentials or something

[slim finch]

youd need to store ssh creds

[warped stratus]

not if you make a user account that only has permissions to execute 1 file

atleast not important ssh cred

s

[slim finch]

having user registered kills security on most ssh libs.

[warped stratus]

Well you just need to find one where security isn't compromised then

[slim finch]

you dont have to, you can simply use metaxploit to get a guest shell. but the point is it is very unintuitive for the user.

[wintry pebble]

bump as an replacement for the now locked "Custom Services"
https://discord.com/channels/415878436104437770/1138198505651966032

[cedar spindle]

@solid knoll