du_1993 2017-04-10 20:42
浏览 344
已采纳

使用Httpful和Basic Auth Header进行PHP API调用

I am using Httpful to call an API that uses basic authentication headers.

Here is how my GET request is set up:

<?php
include('httpful.phar');

$uri = "https://example.com";
$response = \Httpful\Request::get($uri)
    ->addHeader('Authorization', 'Basic KEY')
    ->send();
echo $response;
?>

This works correctly and I am able to display the response data on my PHP page.

However, is this the most secure way to add headers using basic auth? Should I be placing the auth key into a separate file or something more secure?

  • 写回答

1条回答 默认 最新

  • duanlu1876 2017-04-10 20:51
    关注

    Should I be placing the auth key into a separate file

    Probably. As a general rule, you should never commit authentication credentials to your source repository. So, if this file is source controlled, I'd pull out the hard-coded value and replace it with a variable.

    How you set that variable depends on your environment. Often it's sufficient to read from a JSON, INI, or YML config file. Just make sure you set your .gitignore (or equivalent) to exclude that config file from the repository, and make sure that the file is outside the web server's document root, so that it can not be read directly.

    Note, if you've already committed the key, then you'll want to change it, as its current value will live forever in your repository history.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论

报告相同问题?

悬赏问题

  • ¥15 关于#java#的问题,请各位专家解答!
  • ¥15 maccms影视模板 制作影视网站失败 求
  • ¥15 stm32按键设置闹钟数进退位不正常
  • ¥15 三电平逆变器中点电位平衡问题
  • ¥20 这怎么写啊 java课设
  • ¥15 用C语言完成一个复杂的游戏
  • ¥15 如何批量更改很多个文件夹里的文件名中包含文件夹名?
  • ¥50 MTK手机模拟HID鼠标出现卡顿
  • ¥20 求下下面这个数据结构代码
  • ¥20 前端 二进制文件流图片转化异常