Security of Nickname & Key

rbottoms

Is there are way to use an ecrypted version of our Nickname and Key in JavaScript & HTML when using the API?

I am uncomfortable providing such info in the clear.

devbobo

Hi rbottoms,

Can you please give me a bit more information, I am not sure that I fully understand what you are asking.

Cheers,

David

rbottoms

Sure:


var nickname="yourname"; //your smugmug nickname


document.write('******** src="http:\/\/api.smugmug.com\/hack\/json\/1.2.0\/?method=smugmug.albums.get&SessionID='+sess_id+'&NickName=yourname&JSONCallback=getit2"><\/********');

******** type="text/javascript" src="http://api.smugmug.com/hack/json/1.2.0/?method=smugmug.login.anonymously&APIKey=1234YOURKEY7890&JSONCallback=getit"></********




r.b.

devbobo

Hey r.b.,

Thanks for that. No there isn't really anyway to encode that...but perhaps you could obfiscate it, by using url encoding on those two parameters.

Let me know if you need help with that.

Cheers,

David

GarethLewin

Who do you want to hide the info from?



If you are worried about sniffing, then note that you can use https:// connections, which are encrypted.

If you want to hide them from the script, then don't store them in the script. Not sure the exact usage of your script so can't advise more than that.