0

Is it possible to restrict access to my endpoints API without using the User object and OAuth 2? I just want to make sure my API can't be accessed from other mobile or web front ends.

stsandro
  • 343
  • 1
  • 2
  • 10

1 Answers1

0

You can do something similar to this guy. He creates a unique hash and sends it to the endpoint. It doesn't even need to be that complicated a simple random string password thats sent between the two would work as well.

Community
  • 1
  • 1
Ryan
  • 2,512
  • 1
  • 13
  • 20
  • After a bit of research I can only conclude. There is no build in way to secure your API. I've found an interesting article describing how it can be done. http://www.thebuzzmedia.com/designing-a-secure-rest-api-without-oauth-authentication/. It is similar to the way in your link. – stsandro Sep 17 '14 at 13:40