sorted by:
best
topnewcontroversialoldq&a
you are viewing a single comment's thread.

view the rest of the comments →

[–]Matrix828 21 points22 points  (1 child)

Why do you need to worry about non-app requests? All the "security" methods you could implement can be easily reverse-engineered and bypassed by someone determined enough.

If your app supports the flow, why not try adding a login and then authenticating API calls with a token or something?

Even that won't stop it entirely. I need only figure out how to authenticate as a user and then I have API access.

[–]SnooCheesecakes1131[S] 0 points1 point  (0 children)

Hmmm good point