Restrict API enpoints to run from specific domain/ip only

Mohamed

Hello,
Is it possible to only allow the use of an endpoint from a specific domain  or ip-adres. maybe with the help of functions?

thank you

Ray Deck

Yes! You have access to a variable called $remote_ip (https://docs.xano.com/working-with-data/variables#remote_ip) and you can make decisions based on whether this IP is in your whitelist or what have you. 

Mohamed

Thank you Ray!

janlen

Are there other options ? It would be nice if it can be done on base of the origin domain. Based on remote IP's has limitations.

Leon Barth

Hey. @Janlen. If you look further down the documentation, you find what you are probably looking for:

"$request_uri

This is a special environment variable that contains the URI that is being accessed from the API.

$request_querystri..."