Woocommerce API security concerns

As you hint at, it sounds like intuitively very bad design to have one key for all users that’s hard coded in your app. You can’t retract that key without breaking the app for all users, and you can’t limit access easily if one user e.g. overloads your API. If you do this, you may as well have no key at all as it’s likely trivial to recover the key.

Better design in this case is to issue a key per user and include in your app a requirement for a user to enter their own key before the API will work. (Or if they don’t enter a key they are limited somehow to only a small number of accesses)

This means you need to:

  1. Find a way to issue keys per user
  2. Update your app to allow entering the API Key

This should sound familiar as lots of services like any of the Google API’s work like this – you have to register, get a key, put the key in your app/code.

Related Posts:

  1. WooCommerce: Can’t use wc_get_products for custom REST API endpoints
  2. Process checkout using WC REST API
  3. How to build a plugin that supports authenticated POST requests to the REST API from external servers?
  4. Extend Woocommerce rest api routes fails
  5. How to filter Post using Meta Data REST API
  6. How to stop a Gutenberg Block from firing multiple GET Requests?
  7. Output JSON object with woocommerce products
  8. Problem with cURL and rest API
  9. Woo API REST : product variation price is read-only?
  10. Woocommerce reviews xss issue [closed]
  11. Category Tree In WooCommerce Product API
  12. How to upload Woocommerce product images via API? [closed]
  13. How to handle Woocommerce API credentials
  14. What will make Woocommerce REST API to issue 401 [closed]
  15. Woocommerce custom endpoints
  16. Woocommerce REST API – updating an order changes custom tax calculations
  17. Woocommerce Rest Api Categories problem [closed]
  18. API returns blank response after installing & uninstalling WP-rest-api plugin
  19. woocommerce axios react
  20. Get specific values in Woocommerce Rest API
  21. wc_get_products() not return the images details
  22. WooCommerce – Add product with image via REST API
  23. Tax are not showing on order while placing order with REST API
  24. JWT on Woocommerce cannot work with “Customer” role user
  25. Woocommerce REST API – add filter to set maximum query per page for product brands [closed]
  26. WooCommerce – Create multiple product tags via rest api endpoint
  27. Using the WordPress and WooCommerce REST APIs in the same Node app
  28. Retrieve Data from Custom Endpoint
  29. How to solve `Error getting remote image` in woocommerce rest api script?
  30. Getting in an exception for get product detail by id in woocommerce REST api
  31. Impossible to create a new WooCommerce customer using Rest API
  32. How can I send information when a order is completed to my own POS?
  33. Woocommerce Rest API: woocommerce_product_invalid_image_id
  34. WC Booking query bookings with date ranges
  35. “error_message”: “Sorry, you cannot list resources.” using WooCommerce API
  36. Woocommerce REST API: creating variations
  37. Woocommerce REST API not considering discounts and coupons
  38. WooCommerce REST API endpoints don’t exist
  39. Fetch products with filter by similar categories at same time
  40. Send data to external websites when there is an update or create a post
  41. Auto generating API keys using the Application Authentication Endpoint [closed]
  42. GET woocommerce order request is not showing meta data [closed]
  43. Which php files, in a WordPress setup, do not need direct web access?
  44. How to add fee_lines using woocommerce rest API v3?
  45. Update a server-side render Block when woocommerce cart block changed
  46. How to update variable product stock status with code
  47. Woocommerce Product Image and Thumbnails custom function
  48. Create WooCommerce new order with specific ID
  49. woocommerce change order statuses count for specific role
  50. is_user_logged_in() always returns false for woocommerce_login_redirect
  51. WordPress ‘on behalf of’ email
  52. How to change a column width on WooCommerce orders page (Admin)
  53. WooCommerce Shop Orders by Date
  54. Show list of woo commerce orders where particular zip code exists using pre_get_posts?
  55. display first sale product in shop
  56. Redirect customer to login page (with other signup plugin) if user not logged in when proceeding to checkout
  57. Featured image for product listings, but another image as the product image?
  58. Woocommerce: hook action/filter I could use to add variation id and price with each attribute opt on WooCommerce Rest api
  59. How to add custom data to cart for a specific product which I have shown on a page programmatically and with a separate anchor adding it to cart?
  60. How to select from two different tables to display orders list with custom column from other table
  61. Keep getting Notice: Trying to get property of non-object in …\wp-includes\post.php on line 4153 when generating woocommerce coupon
  62. How to subscribe free subscription on user registration in woocommerce subscription plugin?
  63. Woocommerce cart page – Add “Free” to the shipping label when shipping is 0
  64. Change product in cart when billing country is changed
  65. Additional fields on Woocommerce’s rating system
  66. Woocommerce product image [closed]
  67. Question on WooCommerce Syntax
  68. woocommerce_new_product action doesn’t fire
  69. Change The Woocommerce Product Categories Dropdown Widget Placeholder Text
  70. minimum order item for certain products exempting 2 other products (in bulk)
  71. Is it possible to checkout with 2 different shipping options on a single order? [closed]
  72. Undo WooCommerce CSV import
  73. Woocommerce Advanced Shipping (WAS) condition is not being called when selecting “Ship to different address” [closed]
  74. Strip string from $_product->get_title() to get a cleaner mini-cart
  75. WooCommerce Meta
  76. WooCommerce Product Table Conditional styling
  77. Product page attributes dropdown show price
  78. Smart Design for Blog + Woocommerce + LearnDash + Forum/Bodyboss
  79. Ajax add to cart not updating Elementor mini cart totals
  80. How can I make a thumbnail slider
  81. WooCommerce – 500k Jump in Order Number?
  82. Need help with woocommerce roles
  83. Change WooCommerce product and variation prices programatically without affecting performance
  84. Help to locate a woocommerce hook method
  85. How can we find a WooCommerce shop bottleneck? (only when cart is full)
  86. Conditional for product attribute page
  87. Setting Page Visibility for WooCommerce Default Page Doesn’t Work
  88. Deleted products from woocommerce are still in the database
  89. Files names changed (with strange characters) after being uploaded to cpanel
  90. woocommerce_add_to_cart custom function called several times
  91. Adding time of order to Admin email for new order
  92. Hide add to cart when product variation has no price or is unavailable
  93. How to get the WooCommercer product variation image
  94. how add css class to product boxes li, for img, add cart button, decs, price… [closed]
  95. How can I hide the entire “Shipping Details” block on the admin side of Woocommerce? [closed]
  96. Woocommerce – display all sold out products
  97. Modify existing code to show user nickname in woocoomerce order email instead of user_login
  98. How to prevent woocommerce product tag field from update?
  99. WooCommerce custom SVG coloring tool [closed]
  100. Woocomerce erro shipping [closed]