What is needed to protect the API from abuse?

Just wanted to know what steps should be taken to prevent abuse of the API ...

+3
source share
5 answers

Depending on the use case, you could:

  • Require authentication (token per user)
  • Limit access speed (x beats per y times)
  • Restrict IP Access
  • Maximum Transaction Size
  • Maximum response size over a period of time
  • Ask people to be nice
+5
source

, API. , ur API , ; , , API, , ( ) , , . , ++ , API.

, , , , .

PS: , ..

, ...

{} PHP-, , API - - POST/GET - ...

0
  • API- , , API , .
  • , , @vsz. , . sha256 .
  • , API, / API, , - API, - , , - .

, , API,

0

API. ( , API? ? ..) :

  • API (, ), . .
  • , API (, ), . .
  • API , , , , .
  • API
  • API
  • Earn money for access to the API (for example, when people exceed the quota or want to get special licensing conditions)

Consider using an external service to do all this. My company, WebServius ( http://www.webservius.com ) is one example, and there are others.

0
source

Source: https://habr.com/ru/post/1770451/


All Articles