Restricting GET requests only from whitelisted domains

Unknown

Hello there, I’m using Webflow as my front end. There are instances where I need to retrieve information stored in my Xano database via a GET request (using vanilla javascript) and then display them on the front end.

Now my question is - is it possible for Xano to only respond to requests made from my site? This is because anyone who opens up their developer tools in their browser will be able to see my Xano end point and can potentially abuse that end point and I would like to avoid that by ignoring all API requests that are not made from my domain.

Appreciate your guidance on this. Thanks! 🙏🏼🙏🏼🙏🏼

Michael Udinski

Xano gives you access to different environment variables of your request:
[CleanShot 2022-04-19 at 15.44.53.png]You can combine these with preconditions to enforce something must be true in order for your endpoints to run. 

Unknown

Ah that’s exactly what I’m looking for. Thanks so much Michael!