Skip to main content
OverflowAI is here! AI power for your Stack Overflow for Teams knowledge community. Learn more
31 votes
Accepted

Is it impossible to protect an API from data redistribution?

It's not something you can do with technology. As soon as the data leaves your server, it isn't your data anymore. There are several ways a malicious user can extract data from your application: ...
ThoriumBR's user avatar
  • 54.4k
21 votes

Is it impossible to protect an API from data redistribution?

This is a classical Digital Rights Management (DRM) problem. There are no definite solutions, not even in your particular scenario. DRM techniques can make it more difficult to distribute data, but ...
Ja1024's user avatar
  • 7,377
4 votes

Is it impossible to protect an API from data redistribution?

While you can hardly prevent the user from reusing and retransmitting any such data, beyond the measures given in the other answers, one thing you can do is monitor usage patterns and/or limit usage. ...
jcaron's user avatar
  • 3,635
3 votes
Accepted

Why does ssh `known_hosts` file need server name?

The other answers correctly deal with your question. I'm going to address your circumstances: When I push/pull repos on GitHub over SSH, sometimes there will a message about unidentified server which ...
Michael come lately's user avatar
2 votes
Accepted

How OpenID over OAuth 2.0 can be trusted?

After the user has logged in via Google etc., your application receives a signed ID token from the Authorization Server (the Resource Server isn't involved in authentication). According to the ...
Ja1024's user avatar
  • 7,377
2 votes
Accepted

Library to securely expose query language to end user?

Your approach doesn't require a library except a JSON serializer and an HTTP client. This is all very straightforward. I also doubt that it's common to expose the Elasticsearch API to the client. The ...
Ja1024's user avatar
  • 7,377
1 vote
Accepted

Login with roles without internet

If a user can read and modify all files of your application, it is impossible to make it secure. It doesn't matter what you program the application to do, because the user can just change the behavior ...
Sjoerd's user avatar
  • 30.8k
1 vote

Is it impossible to protect an API from data redistribution?

As other answers have already stated, there is no perfect solution to this problem... but you can make life more difficult for someone trying to fetch all of your data programmatically. At some point, ...
Aaron Cicali's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible