REST permissions - How to accommodate unknown ip's

[Gambit]

Hi there

I'm current working on a web app for us to manage and view livestreams. The IP address of of the app will change all the time depending on where we are connecting from.

How do we approach REST security when we cannot always have the same IP address?

Thanks

[Ben Holness]

It seems surprising that your IP address will change all the time. Are you using dynamic DNS to get to the web page? Most of the time, the REST API would be called from the server which would have a static IP, and shouldn't need to be called directly from the client.

That said, I don't know what you are trying to achieve, so maybe this is not the case for you. Depending on your setup, you could either use your webserver (or another server that has a static IP) as a proxy for requests, implementing your own security between the app and the proxy, or you could setup a VPN and run all REST API requests via the VPN.

[Enes Kuluk]

Some of the ISP's offer static IP's. You can ask for that.

Best Regards,

Enes.

 

[Connessione]

For REST API it is best to use token based security than IP based security.  Any reason why you cannot use a token based security here ?