How do you prevent people proxying your API via a node service?
This is something I could never get my head around with CORS - what's the point of whitelisting origins if getting around the whitelist is nothing more than an inconvenience?
This is something I could never get my head around with CORS - what's the point of whitelisting origins if getting around the whitelist is nothing more than an inconvenience?
To prevent someone abusing your API otherwise, use an authentication method.
If you create a proxy for foo.com, your javascript can't get the browser to send the user's cookies for foo.com to your proxy.