1
vote
Prevent a user with a valid session to directly access a json feed
The short answer is that you shouldn't try.
Yes, there are things you can do, but they will be complex and fragile. One obvious solution is to set a time-limited, single use token in the server-side ...
- 21.9k
Only top scored, non community-wiki answers of a minimum length are eligible