Hot answers tagged

1 vote

Prevent a user with a valid session to directly access a json feed

The short answer is that you shouldn't try. Yes, there are things you can do, but they will be complex and fragile. One obvious solution is to set a time-limited, single use token in the server-side ...
symcbean's user avatar
  • 21.9k

Only top scored, non community-wiki answers of a minimum length are eligible