Restrict REST or GraphQL API to certain domains #4354
Answered
by
edalzell
dominikradl
asked this question in
Q&A
-
Hi there, did anyone manage to restrict the REST or GraphQL endpoints to certain domains? I want my decoupled frontend to be able to access it, but no one else. I tried using the Laravel CORS config (Fruitcake middleware) but I'm still able to query all entries (inclunding unpublished entries) via local postman. Maybe I'm misunderstanding CORS or I need to write a custom middleware… Thanks |
Beta Was this translation helpful? Give feedback.
Answered by
edalzell
Oct 1, 2021
Replies: 1 comment 1 reply
-
ya middleware is the answer here, if you don't want to PR into core. |
Beta Was this translation helpful? Give feedback.
1 reply
Answer selected by
dominikradl
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
ya middleware is the answer here, if you don't want to PR into core.