Using AWS API Gateway as a licensing server2019 Community Moderator ElectionHow to pass a querystring or route parameter to AWS Lambda from Amazon API GatewayAWS API-Gateway client authentication and NGINXAWS: Amazon API Gateway Unknown Endpoint Error upon Testing Deployed APILimiting public api gateway to specific IPAPI Gateway intermittently returns “No 'Access-Control-Allow-Origin' header is present…” when the CORS OPTIONS request completes successfullyHTTP Certificate Pinning (HPKP) with AWS LambdaAWS API Gateway to .NET Core Web Api running in ECSSIM 800 GPRS modem for HTTP GET and POST to AWS IoT and AWS API gatewayRestrict API access to specific app clientsInvalidate credentials on Logout with IAM secured AWS API Gateway
Rejected in 4th interview round citing insufficient years of experience
Make a transparent 448*448 image
What to do when during a meeting client people start to fight (even physically) with each others?
Aliens englobed the Solar System: will we notice?
Could a cubesat be propelled to the moon?
A three room house but a three headED dog
Am I not good enough for you?
Can you reject a postdoc offer after the PI has paid a large sum for flights/accommodation for your visit?
Offered promotion but I'm leaving. Should I tell?
Do I really need to have a scientific explanation for my premise?
Built-In Shelves/Bookcases - IKEA vs Built
Force user to remove USB token
What Happens when Passenger Refuses to Fly Boeing 737 Max?
Why is this plane circling around the Lucknow airport every day?
Could a cubesat propel itself to Mars?
Replacing Windows 7 security updates with anti-virus?
What is the likely impact of grounding an entire aircraft series?
BitNot does not flip bits in the way I expected
Grey hair or white hair
Is it true that real estate prices mainly go up?
String reversal in Python
PTIJ: Why can't I eat anything?
They call me Inspector Morse
Good for you! in Russian
Using AWS API Gateway as a licensing server
2019 Community Moderator ElectionHow to pass a querystring or route parameter to AWS Lambda from Amazon API GatewayAWS API-Gateway client authentication and NGINXAWS: Amazon API Gateway Unknown Endpoint Error upon Testing Deployed APILimiting public api gateway to specific IPAPI Gateway intermittently returns “No 'Access-Control-Allow-Origin' header is present…” when the CORS OPTIONS request completes successfullyHTTP Certificate Pinning (HPKP) with AWS LambdaAWS API Gateway to .NET Core Web Api running in ECSSIM 800 GPRS modem for HTTP GET and POST to AWS IoT and AWS API gatewayRestrict API access to specific app clientsInvalidate credentials on Logout with IAM secured AWS API Gateway
Is using AWS API Gateway as a license check server a good approach to limit access to a desktop application? Assuming I hand out API keys to users and query my license server on each startup. I know that no method is 100% bulletproof and my application C code can be reverse-engineered, but I'm happy with weeding out 99.9%.
Correct me if I'm wrong, but the flow should be:
- Application queries the API Gateway
- Application performs certificate validation (to prevent host redirection)
- Application then sends the key to the API
- API answers with go/no-go
Can this be done in API Gateway or am I using the wrong tool?
amazon-web-services aws-api-gateway
asked Mar 7 at 7:53
susdususdu
434312
add a comment |
Is using AWS API Gateway as a license check server a good approach to limit access to a desktop application? Assuming I hand out API keys to users and query my license server on each startup. I know that no method is 100% bulletproof and my application C code can be reverse-engineered, but I'm happy with weeding out 99.9%.
Correct me if I'm wrong, but the flow should be:
- Application queries the API Gateway
- Application performs certificate validation (to prevent host redirection)
- Application then sends the key to the API
- API answers with go/no-go
Can this be done in API Gateway or am I using the wrong tool?
amazon-web-services aws-api-gateway
asked Mar 7 at 7:53
susdususdu
434312
The "go/no-go" requires some code that API gateway realistically won't be able to provide (unless you have only a few licenses). More likely you'll put a Lambda behind API gateway to, for example, read from a DynamoDB table to check if the provided license is still valid.
– stdunbar
Mar 7 at 20:43
add a comment |
Is using AWS API Gateway as a license check server a good approach to limit access to a desktop application? Assuming I hand out API keys to users and query my license server on each startup. I know that no method is 100% bulletproof and my application C code can be reverse-engineered, but I'm happy with weeding out 99.9%.
Correct me if I'm wrong, but the flow should be:
- Application queries the API Gateway
- Application performs certificate validation (to prevent host redirection)
- Application then sends the key to the API
- API answers with go/no-go
Can this be done in API Gateway or am I using the wrong tool?
amazon-web-services aws-api-gateway
asked Mar 7 at 7:53
susdususdu
434312
Is using AWS API Gateway as a license check server a good approach to limit access to a desktop application? Assuming I hand out API keys to users and query my license server on each startup. I know that no method is 100% bulletproof and my application C code can be reverse-engineered, but I'm happy with weeding out 99.9%.
Correct me if I'm wrong, but the flow should be:
- Application queries the API Gateway
- Application performs certificate validation (to prevent host redirection)
- Application then sends the key to the API
- API answers with go/no-go
Can this be done in API Gateway or am I using the wrong tool?
amazon-web-services aws-api-gateway
amazon-web-services aws-api-gateway
asked Mar 7 at 7:53
susdususdu
434312
asked Mar 7 at 7:53
susdususdu
434312
asked Mar 7 at 7:53
susdususdu
434312
asked Mar 7 at 7:53
susdususdu
434312
asked Mar 7 at 7:53
susdususdu
434312
434312
The "go/no-go" requires some code that API gateway realistically won't be able to provide (unless you have only a few licenses). More likely you'll put a Lambda behind API gateway to, for example, read from a DynamoDB table to check if the provided license is still valid.
– stdunbar
Mar 7 at 20:43
add a comment |
The "go/no-go" requires some code that API gateway realistically won't be able to provide (unless you have only a few licenses). More likely you'll put a Lambda behind API gateway to, for example, read from a DynamoDB table to check if the provided license is still valid.
– stdunbar
Mar 7 at 20:43
The "go/no-go" requires some code that API gateway realistically won't be able to provide (unless you have only a few licenses). More likely you'll put a Lambda behind API gateway to, for example, read from a DynamoDB table to check if the provided license is still valid.
– stdunbar
Mar 7 at 20:43
The "go/no-go" requires some code that API gateway realistically won't be able to provide (unless you have only a few licenses). More likely you'll put a Lambda behind API gateway to, for example, read from a DynamoDB table to check if the provided license is still valid.
– stdunbar
Mar 7 at 20:43
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55038651%2fusing-aws-api-gateway-as-a-licensing-server%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55038651%2fusing-aws-api-gateway-as-a-licensing-server%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
The "go/no-go" requires some code that API gateway realistically won't be able to provide (unless you have only a few licenses). More likely you'll put a Lambda behind API gateway to, for example, read from a DynamoDB table to check if the provided license is still valid.
– stdunbar
Mar 7 at 20:43