security - YouTube API v3 - Do I really need to use OAuth for basic read operations? -


i have system user can add content profile, such youtube videos, validate video url , call api video details such title, description , details. nothing else, no update\edit operations.

for i'm using public api key authorize requests, put system domain whitelist

$http.get('https://www.googleapis.com/youtube/v3/videos?id=' + videoid + '&key={{my_key}}' + '&part=snippet')

regarding security issues, need use oauth 2.0 issue token used authenticate requests? if tracked request , capture key, need prevent via oauth, or there's way google developer console make read operations only.

thanks.

you don't need oauth2 read public information.

as can see videos.list, there no authorization scope listed it.


Comments

Popular posts from this blog

javascript - AngularJS custom datepicker directive -

javascript - jQuery date picker - Disable dates after the selection from the first date picker -