Hi guys, I already have a REST API in Flask which manages data coming from my Android App (which is a Game, so no user login and password, just score, checkpoint, and so on) and sends them to a database. However, even using Postman, for instance, you can send a POST request (if you know the URL of course). I would like to enable the request only from my Game App, once installed on a device. The URL to POST data is pretty hard to figure out since it's pretty deep, but I don't know if it's enough to prevent requests from a third party.
Forums
The easiest way to accept POST request only from my Android App in Flask
not sure if there's a good way to do that. but perhaps you could have login / auth credentials for each user / app installed, and then ignore anything that is not authenticated?
conrad
|
4232
posts
|
PythonAnywhere staff
|
The problem is that I don't want to ask user to login when in-game. But maybe I could use some kind of automated log in. I can use some sort of device ID, automatically detected, and use it as a credential. I don't know ahah
