#Api key exposing
1 messages · Page 1 of 1 (latest)
i have a doubt regarding exposing the api key directly which allows third party to directly use the api key i saw few blogs stating that api key protect via headers like specific domain or specific app but these kind checks can be bypassed via crafted packet , is there any support in gmaps to offload it to server and like providing url to my backend and proxying i am not able provide docs for it
The best solution for securing the API key would be to apply the API security best practices. In regards to your use case, you may look at the documentation about using a proxy server as it may prevent exposing your API key on the client-side. In addition to that, you may also want to apply API key restrictions (application + API) to lock down what the key can call.
why cant we create a proxy library to simplfy this