Lock down Cloud Endpoints API to only work with specific Android App -

-

i'm trying lock down cloud endpoints api android app can use it, however, not want use oauth2+google accounts that. reason not want require users have google account login app. example, snapchat uses google app engine, not require have google email use app - create own user name , password.

i have read several posts offering suggestions:

how restrict google app engine endpoints api access android applications?

authenticate "app" google cloud endpoints not "user"

how protect api built using google cloud endpoints?

but wasn't able find satisfactory answer. read, considering having "token" parameter cloud endpoints api method own 64 character long random string. server-side, compare passed in token string stored on server in server code. if match, bingo! have access run method. if don't, error.

a potential problem above approach try decompile apk, token stored in pain text inside android code, , make calls api.

i reading parse.com potentially has problem, special token can decompiled in apk. solve problem offering acl's (access control lists).

but want use google cloud endpoints , not parse. right now, limitation of having have google account annoying... there way around people have found?

build api accept applications signed specific key.

i believe sample showed how implemented https://cloud.google.com/cloud/samples/mbs not viable link there various mirrors on internet


Comments

Post a Comment

Popular posts from this blog

php - Admin SDK -- get information about the group -

-
please, help. https://www.googleapis.com/admin/directory/v1/groups/106274944935548788283 sending request obtain information group id 1062 ... here link method in google https://developers.google.com/admin-sdk/directory/v1/guides/manage-groups#get_group in response error - 401 unauthorized. oauth authenticate via user has received rights necessary request, included in console admin sdk. authorization successful, there token. not can not understand. if not hard - response. requested information: file_get_contents("https://www.googleapis.com/admin/directory/v1/groups/1062749‌​44935548788283?key=aizasybruhiomdf9nlx9lx3imxwesqmcrnhh4l4"); id group - "106274944935548788283" key applications in case - "aizasybruhiomdf9nlx9lx3imxwesqmcrnhh4l4" error: failed open stream: http request failed! http/1.0 401 unauthorized
Read more

dns - How To Use Custom Nameserver On Free Cloudflare? -

-
i have problem. i own small hosting company. trying add cloudflare site free cdn. problem when sign have change nameservers nameservers. have nameserver dns set through godaddy, how add them cloudflare? main site uses company's nameservers whenever add them site goes offline. when go cloudflare's dns records click on dropdown, click ns, , there's 2 boxes 'name' , 'nameserver'. mean input 'ns1' 'name' , 'ns1.domain.com' 'nameserver'? input server's ip addresses? is there way of accomplishing free version of cloudflare? that impossible. option have custom name servers available on business , enterprise. see https://www.cloudflare.com/plans . also, might mistaken. must change name servers in domain register settings, not on cloudflare.
Read more

Python Error - TypeError: input expected at most 1 arguments, got 3 -

-
can explain why can not use your_name in goal variable? my_name = "bryson" my_age = 29 your_name = input ("what name? ") your_age = input ("what age? ") print ("my name is", my_name,", , am", my_age, "years old.") print ("your name is", your_name,", , are", your_age,".") print("thank buying book,", your_name,"!") goal = input ("what favorite part of book,", your_name, "?") print("awesome!") the error is: goal = input ("what favorite part of book,", your_name, "?") typeerror: input expected @ 1 arguments, got 3 you got error because in fact gave 3 arguments input function when expecting 1 (namely, string prompt). in input ("what favorite part of book,", your_name, "?") ---------------------------------------- , ---------, --- the underlined parts comma-separated arguments: st...
Read more