search

microlinkhq / open

4 stars 2 forks source link

Domain Whitelisting for Pro API #26

Open charsleysa opened 5 years ago

charsleysa commented 5 years ago

Feature Request

Is your feature request related to a problem? Please describe. Wanting to use the Pro API from the client side embedded into the HTML without exposing the API Key and without needing to proxy requests through custom backend. At the moment, only the public Microlink API can be used from the client side HTML.

Describe the solution you'd like Use the Referer header (and other identifying headers) to determine access using whitelisted domains.

Teachability, Documentation, Adoption, Migration Strategy Technique used by FontAwesome 5 Pro CDN

Kikobeats commented 5 years ago

Thanks for the suggestion, @charsleysa.

Definitely is a thing that makes a lot of sense include to have.

In order to mitigate the problem, I created a microlink-proxy where you can whitelist domains, expecting to have the same effect. Can you take a look and tell me your impressions?

The second iteration of this is possible to associate the domains with your Microlink Pro account, so you don't need to worried about that.

charsleysa commented 5 years ago

Hi @Kikobeats

The microlink proxy defeats the purpose of this request as that means setting up another backend.

We already have a custom proxy to handle microlink requests for authenticated users, but we are looking at trimming down infrastructure we have to manage.