Only allow requests from single site in Django Rest Framework











up vote
0
down vote

favorite












For illustrative purposes let's say I have a website at https://www.signup.com that let's users sign up for an email list. After the user enters their email and hits 'Submit,' signup.com sends POST request to a Django Rest Framework API hosted at https://www.manager.com:



{ "email" : "fake@whatever.com" }


Then the server adds that email to the database.



My question is: what's the best way to ensure that only signup.com is able to successfully send POST requests to manager.com?






django django-rest-framework







share|improve this question






















  • I would have a look at CORS and especially the Access Control Allow Origin option.
    – Derlin
    yesterday

















up vote
0
down vote

favorite












For illustrative purposes let's say I have a website at https://www.signup.com that let's users sign up for an email list. After the user enters their email and hits 'Submit,' signup.com sends POST request to a Django Rest Framework API hosted at https://www.manager.com:



{ "email" : "fake@whatever.com" }


Then the server adds that email to the database.



My question is: what's the best way to ensure that only signup.com is able to successfully send POST requests to manager.com?






django django-rest-framework







share|improve this question






















  • I would have a look at CORS and especially the Access Control Allow Origin option.
    – Derlin
    yesterday















up vote
0
down vote

favorite









up vote
0
down vote

favorite











For illustrative purposes let's say I have a website at https://www.signup.com that let's users sign up for an email list. After the user enters their email and hits 'Submit,' signup.com sends POST request to a Django Rest Framework API hosted at https://www.manager.com:



{ "email" : "fake@whatever.com" }


Then the server adds that email to the database.



My question is: what's the best way to ensure that only signup.com is able to successfully send POST requests to manager.com?






django django-rest-framework







share|improve this question













For illustrative purposes let's say I have a website at https://www.signup.com that let's users sign up for an email list. After the user enters their email and hits 'Submit,' signup.com sends POST request to a Django Rest Framework API hosted at https://www.manager.com:



{ "email" : "fake@whatever.com" }


Then the server adds that email to the database.



My question is: what's the best way to ensure that only signup.com is able to successfully send POST requests to manager.com?






django django-rest-framework




django django-rest-framework






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked yesterday









garrettedel

5814




5814












  • I would have a look at CORS and especially the Access Control Allow Origin option.
    – Derlin
    yesterday




















  • I would have a look at CORS and especially the Access Control Allow Origin option.
    – Derlin
    yesterday


















I would have a look at CORS and especially the Access Control Allow Origin option.
– Derlin
yesterday






I would have a look at CORS and especially the Access Control Allow Origin option.
– Derlin
yesterday



















active

oldest

votes











Your Answer






StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














 

draft saved


draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53401772%2fonly-allow-requests-from-single-site-in-django-rest-framework%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown






























active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes
















 

draft saved


draft discarded



















































 


draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53401772%2fonly-allow-requests-from-single-site-in-django-rest-framework%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







-

Popular posts from this blog

Berounka

Image
Berounka.mw-parser-output .entete.map{background-image:url("//upload.wikimedia.org/wikipedia/commons/7/7a/Picto_infobox_map.png")} Caractéristiques Longueur 139  km Bassin 8 861  km 2 Bassin collecteur Elbe Débit moyen ? Cours Source Confluence de la Mže et de la Radbuza · Localisation Pilsen · Altitude 305  m · Coordonnées 49° 45′ 13″ N, 13° 23′ 24″ E Confluence Vltava · Localisation Prague · Altitude 187  m · Coordonnées 49° 59′ 43″ N, 14° 24′ 04″ E Géographie Pays traversés   République tchèque modifier   La Berounka est une rivière de la République tchèque. Elle porte le nom de Mže depuis sa source en Allemagne près de la frontière jusqu'à sa confluence avec la Radbuza à Plzeň. Elle continue ensuite sous le nom de Berounka jusqu'à sa confluence avec la Vltava, près de Prague. La rivière est une destination prisée pour les amateurs de canoë, qui appréc...
Read more

Sphinx de Gizeh

Image
Pour les articles homonymes, voir Sphinx. Sphinx de Gizeh.mw-parser-output .entete.egypte-antique{background-image:url("//upload.wikimedia.org/wikipedia/commons/c/cc/Picto_infobox_ancient_Egypt.png")} Site d'Égypte antique Le visage du sphinx de Gizeh. Noms en arabe أبو الهول , Abou al-Hôl Localisation Région Basse-Égypte Coordonnées 29° 58′ 31″ nord, 31° 08′ 16″ est Géolocalisation sur la carte : Égypte Sphinx de Gizeh modifier   Le sphinx de Gizeh est la statue thérianthrope qui se dresse devant les grandes pyramides du plateau de Gizeh, en Basse-Égypte. Sculpture monumentale monolithique la plus grande du monde [ 1 ] avec 73,5 mètres de longueur, 14 mètres de largeur et 20,22 mètres de hauteur, elle représente un sphinx couchant. Réalisée vers -2500, elle serait attribuée à Djédefrê, l'un des pharaons de la IV e  dynastie, représentant son père le pharaon Khéops. Sommaire 1 Étymologie 2 Desc...
Read more

Different font size/position of beamer's navigation symbols template's content depending on regular/plain...

Image
3 Let's suppose I'd like to divert the navigation symbols template (e.g. in order replace them by the frame numbers, see this bug report ;) I would be facing troubles regarding the font size/position, depending on regular/plain frames, as shown by the following MCE. How could I get rid of these troubles? documentclass{beamer} usetheme{PaloAlto} setbeamertemplate{navigation symbols}{insertframenumber/inserttotalframenumber} begin{document} begin{frame} frametitle{A regular frame} end{frame} begin{frame}[plain] frametitle{A plain frame} end{frame} end{document} beamer header-footer share | improve this question asked Dec 10 '18 a...
Read more