Auth for tracking API - Githubissues

matomo-org / matomo

Empowering People Ethically with the leading open source alternative to Google Analytics that gives you full control over your data. Matomo lets you easily collect data from websites & apps and visualise this data and extract insights. Privacy is built-in. Liberating Web Analytics. Star us on Github? +1. And we love Pull Requests!

https://matomo.org/

GNU General Public License v3.0

19.68k stars 2.62k forks source link

Auth for tracking API #22568

Closed maddyexplore closed 1 week ago

maddyexplore commented 1 week ago

Summary

We have deployed and using Matomo on-premise. In that, Tracking API seems to be open and can be accessible from any webpage without any authentication. Is there any way to restrict this action and make the tracking Api secure and accessible only from our applications?

Your Environment

Matomo Version: 5.1.1
PHP Version: 8.2.23
Server Operating System: Linux
Additionally installed plugins: Nil

sgiehl commented 1 week ago

Hey @maddyexplore,

I'll close this as duplicate of https://github.com/matomo-org/matomo/issues/20801. As it's basically the same. You will find an answer in this issue as well.

Cheers,