What's the point of creating a Platform if every mobile client app can access Appwrite?
At first I thought that we have to create a platform to let the mobile client app with the correct bundle id or package name have access to Appwrite. But that's not the case. I deleted the Flutter iOS app platform. How come that when I run the app, it stilll has access to Appwrite? I expected the app to not have access or fail fetching data from Appwrite. This mean that all I need is an endpoint, project id, a client SDK. Boom, nothing prevents me accessing people's Appwrite service.
i also have same thinking , appwrite should have google integerity api inbuild in it , so that only real app can get data .
This is typically how REST APIs work. If you need to prevent access, you should do so with permissions
Ahh, I see. But we don't really have ways to prevent access to public collections? Since my client app doesn't use authentication, I need to make the collections to be readable by "any". Also I don't want others to abuse freely my Appwrite service for which I have to pay. Any suggestion for my use case?
I want to prevent users from creating account and login in my app from fake app , which permission we should set in appwrite?
Please create a separate post
There's probably no way to block all abuse. You can make it harder to abuse if you use an Appwrite function and putting your own rate limit somehow
Can you please explain it in a little bit details? What kind of logic do I need to run via Appwrite functions? I think putting the rate limit will also affect all client apps, right?
You can create your own logic to handle it, so you can make it per account, etc
if i have to make login system by myself , then what is benefit of using appwrite . like firebase there is sha1 key so that only real app can access data , appwrite should have this type of solution .
I mean logic
Sha1 key can be bypassed to probably
Give this a 👍 too: https://github.com/appwrite/appwrite/issues/4791
but getting a sha1 key is hard i think , may be it will bipass but it increases security
