How to secure API access in Laravel 4 with AngularJS

I am new to Laravel4 and I have the following setup: (1) Back end in Laravel and (2) Front end in AngularJS

I would like to know how to restrict API access. I have implemented an Auth Token system that is set by the front end when making API requests.

However, anyone can use network call validation, copy / Auth access token, and use it to make API requests. How can I secure my API to prevent such an attack by someone who can copy the Auth token?

+3


source to share


1 answer


If you are using HTTPS the communication will be encrypted and no ne will be able to sniff the token on your network.



0


source







All Articles