How to secure HERE API keys? -
how prevent taking api keys client side javascript code , starting use here subscription other use.
i noticed here provide option secure api keys domain on applications management page: "secure app credentials against specific domain". have set option , put domain there not see change on app behavior.
the application still continue working fine on pc. shouldn't here api stop working web server running on localhost , not on defined domain.
my app running on browser, , static files come server (http://localhost:8083/index.html). using here javascript api.
i tested running app on external cloud service on different domain localhost. results same. conclusion setting "secure app credentials against specific domain" has no impact , not work. checked api response headers , origins accepted.
access-control-allow-origin: *
Comments
Post a Comment