1
CORS is not meant to secure an API endpoint
CORS does not secure your API: why browser-side API keys are unsafe, and how to protect Drupal JSON:API endpoints with proper authentication.
Niko Fischer (Nikolai Fischer), developer and founder of Kommune3: tutorials on Supabase, Drupal and crypto trading bots, plus practical personal development.
Visit nikofischer.com → On Hacker News Feb 2022 – Feb 2022
CORS does not secure your API: why browser-side API keys are unsafe, and how to protect Drupal JSON:API endpoints with proper authentication.