java - PHP Rest api security -


we working on game in java. user authentication using rest api made in php.

i'm using sessions store uid , game stores session in cookiestore. we've come conclusion isn't secure enough. thought temporary token, 'attackers' somehow able tokens himself. use api secret key, attackers might able reverse-engineer game.

what want nobody can access api except our game.

probably make 1 time use token generated on request? , obfuscate code.


Comments

Popular posts from this blog

html - Sizing a high-res image (~8MB) to display entirely in a small div (circular, diameter 100px) -

java - IntelliJ - No such instance method -

identifier - Is it possible for an html5 document to have two ids? -