java - PHP Rest api security -


we working on game in java. user authentication using rest api made in php.

i'm using sessions store uid , game stores session in cookiestore. we've come conclusion isn't secure enough. thought temporary token, 'attackers' somehow able tokens himself. use api secret key, attackers might able reverse-engineer game.

what want nobody can access api except our game.

probably make 1 time use token generated on request? , obfuscate code.


Comments

Popular posts from this blog

c# - OpenXML hanging while writing elements -

php - regexp cyrillic filename not matches -

sql - Select Query has unexpected multiple records (MS Access) -