4 ms·
So essentially, you only let the server side rendering function, access the API and don’t secure it at all beyond that? You could essentially use a static JWT
by daft_pink 2y ago
So essentially, you only let the server side rendering function, access the API and don’t secure it at all beyond that?
You could essentially use a static JWT token that only that nexts cloud function knows?
- eigenvalue 2y agoYeah, I restrict it by the IP address, so the FastAPI backend can only receive connections from localhost or the one machine running the NextJS app. There are certainly lots of ways you could restrict it, such as using a password or key.