RPC call security

Question

hi

RPC call function seem always have userid/username as param on request to know the call from which user. This is really not security which easy recognize by hacker and they easy to send fake userid/username.

So, how to security that?

Answer 1

HI,

In all AppWarp api call we generate a specific signature based on that API-Key, on the server side same will be decoded to authorize the respective calls.

So all security is managed by the API-key that you have used for initialization.So all api calls are managed by WarpClient.

Let me know if it helps.

Thanks & Regards

Vishnu Garg

 

 

Comments

From server side, without userid as param from RPC function, how do i know the call from whose client?

---

In that case you need to pass userId as a parameter.