I've created my first mvc 4 project using the web api template. I've configured CORS to restrict other sites from accessing my api directly into other websites.
I use ajax to retrieve the data supplied by the api into a web page and that works well.
The address to my web api is
http://www.xyz.com/webapi/ one of the actions is
http://www.xyz.com/webapi/api/sales How can I prevent anyone from accessing /webapi and /webapi/api/sales directly and using the data (screen scraping) for their own use. I do not want any other service browser accessing the web api, just the ajax query
that is present on another website that I've set up. The ...
Go to the complete details ...