Our great sponsors
-
Of course, you can look into CORS, but this can only do so much and is quite easily circumvented (as others have mentioned, nothing is stopping someone from just opening Postman and creating a request targeting that endpoint).
-
If you want to protect user data, this can be done by only supplying data to users if they have the appropriate permissions to view it. Authentication like this is usually implemented using JSON Web Tokens (JWT) and storing an authentication token in the database to match against each user session.
-
Appwrite
Appwrite - The Open Source Firebase alternative introduces iOS support . Appwrite is an open source backend server that helps you build native iOS applications much faster with realtime APIs for authentication, databases, files storage, cloud functions and much more!
