Skip to main content

Block unauthorised access to the API of your CMS

C
Written by Cyberangels
Updated over 2 years ago

It is generally not advisable to leave so much internal information exposed on the Internet, even if it is not highly sensitive.โ€ฏIn the event that your company makes use of API endpoints, take care to ensure that access to them is only active for authenticated users. Should they try to access it, normal users of your website should see an error message like the one in the screenshot below.

This is to ensure that authenticated access is required before the API delivers any results.

Did this answer your question?