CODEWITHSUNDEEP
analytics
JMRC
JMRC

Reputation: 1514

Track application usage - security

Similar questions have been asked before, but this a one is a little different. I created a REST API to send an XML document with `POST. I send data from my (Windows) application to the servers, which includes: open time, operating system, version, etc.

I have one problem though. How can I make sure people can't use the REST API? How do I know that the information sent to the server is from an application and not from someone who knows the URL? How do analytic software companies solve this problem?

Thank you.

Update

I would like users to use my application without having to log in. I am pretty sure that companies that create apps that do not force you to log in are able to see whatever you are doing.

Upvotes: 1

Views: 87

Answers (1)

MeIr
MeIr

Reputation: 7326

Well there are several way to secure your service. You can always setup authentication & authorization for the service - this way the service will be available only to registered/known users.

Here are links few links for more details:

Best Practices for securing a REST API / web service

http://www.stormpath.com/blog/secure-your-rest-api-right-way

Also there are less sophisticated ways such as setting firewall rules to allow connections only from certain places -- I don't think it is a recommended approach.

Upvotes: 1

Related Questions