186 reputation
4
bio website
location
age
visits member for 2 years, 11 months
seen Apr 23 at 21:02

Sep
23
comment E-Commerce website with REST backend : do I have to secure Backend URLs accessed by Front end public pages?
'there should be network controls restricting who can communicate with the back end'. That is exactly what I want. How could I manage this ?
Sep
23
comment E-Commerce website with REST backend : do I have to secure Backend URLs accessed by Front end public pages?
So, how can I secure these backend URLs in order to be only accessible by frontend, and ONLY if the user is navigating on the frontend ? How can I prevent the user to perform a request directly from the frontend without navigating on it (by a REST client for example, as soon as he knows the URL to attack) ?
Sep
22
asked E-Commerce website with REST backend : do I have to secure Backend URLs accessed by Front end public pages?
Aug
22
awarded  Popular Question
May
3
awarded  Popular Question
Mar
14
awarded  Nice Question
Apr
11
comment Security drawbacks for using short-lived access token in javascript client side
Thanks for the good response. But what do you mean by "you should only attack the access token to requests you have constructed entirely on your own" ? What i intend to do is for example use jQuery ajax method and send an authorization header with the access token value. Is this approach fine ?
Apr
9
asked Security drawbacks for using short-lived access token in javascript client side
Dec
20
awarded  Student
Dec
19
asked Best way to secure javascript front end/REST back end architecture web site?