javascript - How to make REST calls secure -
i'm calling webservice using rest methodology using json/js/jquery , wondering if there way call webservice without exposing api keys in source code. know of way hide api keys public , still make call?
i'm worried if goes through source, able use api key.
you delegate calls own server, instead of:
- browser sends http request external rest api, api key
- external rest api sends response browser
you have
- browser sends http request server
- your server sends http request external rest api, api key
- external rest api sends response server
- your sever sends response browser
i'm not sure else "stealing" api key huge problem, though, since api keys (google, example) associated specific domains.
Comments
Post a Comment