API get server

Sanjeewa4 years ago

GET api/server doesn't have security authorization. on the API reference indicating that this has got Basit Auth, but it is allowing us to read even without authorization.
eg: http://demo3.traccar.org/api/server

Anton Tananaev4 years ago

That's expected behavior.

Joystick4 years ago

Hi Anton, I just realised that this actually exposes the bingKey. How can I prevent non authorised people from viewing and copying the bingKey?

Anton Tananaev4 years ago

You don't. You just need to configure your key to not allow any usage outside of your website.

Joystick4 years ago

I am glad I asked the question as my key was not secured. Thanks Anton I've changed the security on my bingKey now so it can only be used on my website.