Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

API Auth or Encryption | Node JS Backend #99

Open
NayakPenguin opened this issue Oct 1, 2023 · 9 comments
Open

API Auth or Encryption | Node JS Backend #99

NayakPenguin opened this issue Oct 1, 2023 · 9 comments
Assignees
Labels

Comments

@NayakPenguin
Copy link
Member

The rule is that only authorized users should be able to use the API, and we want to restrict calls to it from any unauthorized sources. To access the API, you'll need an authentication key stored in your environment settings. Also, try to do some encryption which will convert the values into other characters, and on the frontend side it can be extracted.

Although CORS can help with this, it has some limitations. So, if you have a clever solution, please help us solve this problem in a better way!

@0-mayurkaretha
Copy link

Hello @Nayaker
I'd like to contribute, please assign me.

@NayakPenguin
Copy link
Member Author

NayakPenguin commented Oct 2, 2023

Awesome @0-mayurkaretha , because this is a somewhat complex issue, could you start by sending a simple introductory email to [email protected]?

@NayakPenguin
Copy link
Member Author

@0-mayurkaretha would you be interested in working on the issue?

@0-mayurkaretha
Copy link

sure, thanks.

@NayakPenguin
Copy link
Member Author

@0-mayurkaretha
Can you please check your discord

@NayakPenguin
Copy link
Member Author

Screenshot 2023-10-06 at 7 21 45 PM

@0-mayurkaretha
Copy link

Screenshot 2023-10-06 at 7 21 45 PM

Here, implementing authorization means registering user and give them JWT token to be able to call api, but its not much difference. After they have a token they can call api whenever they want.

So another possible solution I am checking is to make api calls server-server side instead of client-server side. I will create PR after its done.

@NayakPenguin
Copy link
Member Author

Awesome 💪🏻

@NayakPenguin
Copy link
Member Author

https://api.cuvette.tech/api/v1/student/internship-post/active?pageNumber=1&sortByDate=true&stipendRange=[5000] I want something like this to be implemented here.

Screenshot 2023-10-08 at 2 27 07 AM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants