security - Check for a domain -
How can I test whether the request for the API is coming from the right registered domain?
You can not do
You can check the IP from the server, but 1 server can control the $ n domain.
I have tested with Google: Token my Google Map API key, That's just giving me ping and receiving domain IP server; But the API key is valid from every domain on that server ... while changing the server (second with separate IP) the same API key returns an error
Comments
Post a Comment