All times are UTC - 6 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: Securing My Key
PostPosted: Mon Feb 20, 2017 12:38 pm 
Offline
brucehyatt - FlightAware user avatar

Joined: Mon Feb 20, 2017 10:51 am
Posts: 3
I tried searching for this subject because I was sure someone must have asked but I couldn't find anything relevant. If I missed something, please point me in the right direction.

Otherwise, is there any way to keep my key secure using JavaScript/AJAX? It seems that no matter what I do it will show up in the developer console. Unlikely or not, a stolen key could get very expensive.

Thanks in advance,
Bruce


Top
 Profile  
 
 Post subject: Re: Securing My Key
PostPosted: Mon Feb 20, 2017 2:00 pm 
Offline
FlightAware Staff
bovineone - FlightAware user avatar

Joined: Wed Jul 27, 2005 3:00 am
Posts: 1435
Location: FlightAware WHQ
We do not recommend that FlightXML2 be use directly within publicly accessible Javascript pages for this reason. Typically you would want to use a backend application on your server that is acting as a front-end for your public webpages.

The FlightXML2 jQuery example mentions this limitation ("We recommend that this technique be only used in protected Intranet environment, since embedding your FlightXML API key in public web pages will allow other users to copy your key and make unauthorized use against your account.")


Top
 Profile  
 
 Post subject: Re: Securing My Key
PostPosted: Mon Feb 20, 2017 4:44 pm 
Offline
brucehyatt - FlightAware user avatar

Joined: Mon Feb 20, 2017 10:51 am
Posts: 3
It looks like I may be able to store the key and send it to the API server without exposing it, using PHP. That's what I'm going to try anyway.

- Bruce


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC - 6 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to: