Restricting API users to certain domains or limiting to one client's resources

Well, in the meantime I've created a small proxy web service that uses the same JSON interface as ISPConfig but uses normal user login credentials for resource checks. It needs a single API user with proper DNS permissions and to read user data for pw hash checks. It allows TXT record access to all of the user's zones. Requires no change to the acme.sh DNS plugin. In case anyone is interested, I can post the source for this.

 

Sure, I'll pack it up and post it there later. Or if you see it fits the ISPC GitLab, I can upload a repo there too. Or to GitHub, maybe.

 

OK, should I just create a new dir in that repo and put files there?

 

OK, I've pushed it to https://git.ispconfig.org/kobuki/Modules/tree/master/ispc_acmeproxy as I have no permission to push upstream. Added a small readme too.

 

Sure, here you are: https://git.ispconfig.org/ispconfig/Modules/merge_requests/5
I thought I don't just create a PR without anyone reviewing the code somewhat first.