Learn More
Resend Email
2
mundo03
5y

So, need to secure some requests.
I decided on going passwordless on the website but I want to have an API too.

I am reviewing auth0.
I am also not sure if I can secure the same endpoints as private and public differently, so the private is used by the backend with no auth and the public with auth.

Wold you guys help me with some reading material?

question

api

auth

auth0

security
Favorite
Ranter
Comments
  • 2
    5y
    .
  • 1
    5y
    If all the endpoints are on the same API, just secure them all, an insecure endpoint (public or not) is still insecure.

    Adding backend headers doesn’t take much or multiple requests for auth/token usage.
Related Rants
devRant © 2021 Hexical Labs LLC
Privacy Policy  |  Terms of Service
Add Comment