search

alefort / getcrafty

MIT License
0 stars 0 forks source link

How can we limit API calls #23

Open alefort opened 9 years ago

alefort commented 9 years ago

API Calls should only come from authorized parties, ie: our web app, nowhere else. We have reverse engineered some useful data, its ours!

alefort commented 8 years ago

Looks like token based api auth is the way to go. But I'm still not sure, since I would need to expose a username/password in the client side. How can I protect the username/password on the client side so that no one else can poach it?

alefort commented 8 years ago

http://jwt.io/