javascript - How to talk to a 3rd party API securely on the client? -
i'm designing api paid-for access.
customers may want consume api on server (all fine) on client through javascript.
i have trouble conceptually coming way safely. i.e: secure methods (i know @ least) rely on way of doing secret handshake, private key, etc. thing is, when issuing requests client private key see.
of course whitelisting on domain-names can spoofed.
so: how talk 3rd party api securely on client?
Comments
Post a Comment