sul-cidr / scriptchart-backend

Admin UI and API for Scriptchart
https://db.syriac.reclaim.hosting/admin
MIT License
1 stars 0 forks source link

Restrict access to portions of REST API to front-end deployment server only #30

Open broadwell opened 5 years ago

broadwell commented 5 years ago

Prof. Penn has expressed interest in providing certain portions of the REST API as data resources to the larger Syriac community, so we should try to do this, but also restrict those endpoints that could be exploited or used to access restricted resources (e.g., proprietary images).