How to Secure my Backend API when connecting with Vue based Web Application

Question

I am creating a payment gateway integration where merchant can allow user to pay either via card, cryptocurrency or bankwire. I want only my frontend to be able to access the API. One way of doing is that whitelisting IP of my frontend on my flask application which acts as the backend. Any other suggestions to how properly secure the API's as it will transfer really secure information bw the internet

You can use the jwt token header (jwt.io) for each API request and validate it at flask. Request for jwt token during signing in and then keep it in localstorage. append the jwt authentication in every request header. — Nibin Baby
– Nibin Baby, Commented Mar 2, 2020 at 9:21

Nicolas Brondin-Bernard · Accepted Answer · 2020-03-02 10:46:35Z

1

Three things here:

Token based authentication (as Nibin already said)
CORS on the server side to allow requests coming from your domain name only
HTTPS

answered Mar 2, 2020 at 10:46

Nicolas Brondin-Bernard

697 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to Secure my Backend API when connecting with Vue based Web Application

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related