I want to skip superset APIs authentication and want to access superset rest APIs without passing access token. Can anyone suggest how can I achieve it?
Thanks,
Abhishek Singh
Related
I can't find Platform REST API, please guide me.
Please see: https://docs.camunda.org/manual/7.18/user-guide/spring-boot-integration/rest-api/
By default the application path is engine-rest, so without any further
configuration you can access the api at
http://localhost:8080/engine-rest.
Recently I received this Alert in the Google Play Console
Your app contains exposed Google Cloud Platform (GCP) API keys
I am using the YouTubeApi Player, and I believe the only why you can initialize it is using this line of code
youTubePlayer.initialize(DEVELOPER_KEY, this);
So beside added restrictions to my API key, is there any other way to remove the API Key from the code?
I tried using the GCP service accounts as suggested by Google, but I do not see how I can still use the YouTube Player without the initialize line of code.
I have same problem, and fixed this by using string R.string.google_api_key generated by google_services.json
change your code to:
youTubePlayer.initialize(getString(R.string.google_api_key), this);
how to get google_services.json:
create firebase project https://firebase.google.com/docs/android/setup?hl=id
get your google_services.json https://support.google.com/firebase/answer/7015592?hl=id
There are some tips on how to secure your API keys at Using API Keys documentation.
It is stated that embedding API keys directly in the code should be avoided, which is the way you are having it right now, therefore you are getting the warning message.
Follow the tips on that page and you should properly secure your API key. As soon as you do so, the warning will go away.
UPDATE
To avoid having a long discussion in comments, allow me to elaborate further providing this update.
Google provides different ways of authentications to give you more options for securing your apps based on your needs. The warnings are helpful tips to make your apps more secure when going in production or exposing to public. So in your case, it would be better to use a different way of authentication.
API keys can be used in server side. e.g. If you are using an API key to authenticate a 3rd party service from an App Engine app, you can use this key as you already have it, since it is impossible for the key to get exposed. (Avoid using API keys in JavaScript since inspecting the page in the browser will expose the API key as well)
In your case, since you are developing an Android app and/or an iOS app, having the API key in the code is dangerous. Because, anyone can use the .apk or the .ipa file and find a way to access it. Therefore, for developing Android apps and iOS apps it is suggested going with different authentication method. The other authentication method supported in YouTube player API is using OAuth 2.0. For more information you can check the Registering your application documentation.
I need to implement a feature to take user session credentials.
Then to use them to authorize in a proxy server.
It should be implemented the same way as in the VMware vSphere Client.
I tried to use CredWrite/CredRead but CredRead works only for the names produced by CredWrite call.
Can you help me to understand how to do that or give me an article describing this?
Many thanks!
I just want to create an OAuth token that I can use when accessing the Container Engine service. But the docs are hopeless in this regard.
Could somebody explain how to generate a token? Every other REST service I've ever used gives me a way of clicking a button and obtaining a token.
NOTE: Must not require installing any proprietary software, e.g. the Google SDK.
omg, that was so painful to discover. But eventually I fumbled into this:
https://console.developers.google.com/apis/credentials?project=projectId
(replace projectId with the value for your setup)
which lets you generate an API key.
Is it possible to use ember-simple-auth with multiple auth providers at the same time? For example, in my website I want to call few google analytic APIs using google's JWT auth token and other APIs using custom oauth2 token.
You can have few authenticators, but use only one authenticator at the time. It's mentioned in docs. So the answer is no. It's because you have only one session service, which holds authentication status. And I don't see a way of solving this without heavily modifying ember-simple-auth.