Hi, I wish to secure my APIs against third party

Question

Hi, I wish to secure my APIs against third party

abuse by making sure that only my webapp can use the routes.

Soooo, how could that be achieved?

I've been looking into auth-token in header during calls but how do I store and send that Auth token to the API in a secure fashion

0

08.01.2018

3 ответов

1 просмотр

Thomas

Why not just just have a secret domain / key / token for the API?

0

08.01.2018

Ishan Jain

create temporary cookies with some token and age 30 min to 1 hour. save this token in redis and check on every incoming Request. The ttl should be short, because otherwise anyone can generate a token just like your webapp does and keep using it.

0

08.01.2018

Константин · Accepted Answer

Константин

https://jwt.io/

0

08.01.2018

Похожие чаты

Hi, I wish to secure my APIs against third party

3 ответов

Похожие вопросы