Re: Security for Web service deployed over GAE

[Gaurav Bansal]

Please do reply....

On Tuesday, 8 January 2013 12:06:57 UTC+5:30, Gaurav Bansal wrote:

Hi 

I have created a REST service and deployed over cloud using GAE. I don't want it to be accessed by any one just by using the URL. I should have some control over there to provide the authentication, may be along with the request. 

I explored and got some OAuth related tutorials, but could not understand properly.

Please help me regarding this.

Thanks in advance.

[Jesús Espejo]

Hello,

Maybe the best solution, if you don't want to complicate your code, is to use CORS, allowing cross-requests only for the domains that you want to allow access to your RESTful API.

Take a look at this: http://www.html5rocks.com/en/tutorials/cors/