DEV Community

Discussion on: Secure API Keys on the Frontend - Vue JS

Collapse
 
mary_white profile image
Mary White

How are the Netlify Functions going? I also looked into this route for securing my APIs but I was concerned about the exposed endpoints with Netlify Functions. A malicious actor can reach this endpoint and use a bot to cause damage/ have the API shut down. I ended up using KOR Connect for the extra protection on the public endpoint that is created to prevent unwanted calls with or without the browser

Collapse
 
elliotandres profile image
Elliot Andres

At the end Netlify functions worked just fine to me. We could secure the function to accept only wanted connections without issues. This kor tool looks nice but there is no info about how the security works nor their datacenter security, info handling or even penetration testings. At the place I work at, this things are key values for us to choose a provider.

I have seen some local proxies around, I wonder if putting them into an ec2 would work haha

Thread Thread
 
rgetkor profile image
Rodrigo

Hi Elliot,

We are currently working on putting more information on our web explaining the security side of our app. Once we update this during the coming weeks, feel free to give it a look!
I assure you can have a better experience than doing functions.