security - YouTube API v3 - Do I really need to use OAuth for basic read operations? -


i have system user can add content profile, such youtube videos, validate video url , call api video details such title, description , details. nothing else, no update\edit operations.

for i'm using public api key authorize requests, put system domain whitelist

$http.get('https://www.googleapis.com/youtube/v3/videos?id=' + videoid + '&key={{my_key}}' + '&part=snippet')

regarding security issues, need use oauth 2.0 issue token used authenticate requests? if tracked request , capture key, need prevent via oauth, or there's way google developer console make read operations only.

thanks.

you don't need oauth2 read public information.

as can see videos.list, there no authorization scope listed it.


Comments

Popular posts from this blog

Payment information shows nothing in one page checkout page magento -

tcpdump - How to check if server received packet (acknowledged) -