java - PHP Rest api security -
we working on game in java. user authentication using rest api made in php.
i'm using sessions store uid , game stores session in cookiestore. we've come conclusion isn't secure enough. thought temporary token, 'attackers' somehow able tokens himself. use api secret key, attackers might able reverse-engineer game.
what want nobody can access api except our game.
probably make 1 time use token generated on request? , obfuscate code.
Comments
Post a Comment