Re the video "Securing your Xano APIs"

Options

@Chris Coleman Thanks for that very helpful video. My app will be public facing and I assume the worst at all times.

My question is: In Xano, is there a way to block traffic from specific countries?

Best Answer

  • Ray Deck
    Ray Deck Trusted Xano Expert ✭✭✭
    Answer ✓
    Options

    You can check headers for the source IP of the client making the request to your endpoint by checking the $http_headers "env" variable. geolocate the IP address using one of the services out there to validate. You can put all this into a custom function that you write once, but can apply to all of your API endpoints.