[Android] [Security] Pendo key restriction android?

• 正式なコメント

  

  David Faerman

  2024年04月17日 10:52

  Thanks for contacting us.
  Will answer the second question first:

  If the API Key is compromised, will it a big security threat, and what can an external user can do with our pendo API?

  If the Key is compromised, the attacker can not do anything. The key is only good for sending information to Pendo; it can NOT be used to retrieve any information.

  Can we restrict the API key to a single android application(like google maps) using the pendo dashboard, so that even if the API key is compromised the hacker cannot use the API key for anything else?

  We do not currently have that feature. However, we do have the JWT signature to ensure you are the only one sending data.
  Please check this link Send signed metadata with JWT
• 

  Mohammed Basim

  2024年04月17日 11:37

  Thanks David Faerman for a quick response!!

  0

サインインしてコメントを残してください。