'How to hide http request header?
I have an auth token in my http-request header (look screen)
But I need to hide this header so that no one can get this token from the console. How can i do this?
Solution 1:[1]
It is not possible to hide this token. However if you use HTTPS, the connection to your website is secure and no one in the middle can see it. The token is only visible to the user that it belongs to, so it poses no security risk as the user should have access to it.
Being able to inspect the requests sent is a feature of the browser and it is in no way related to your site.
Solution 2:[2]
The problem is that u can see data over HTTPS, if u have access to the client computer or mobile device. Mobile devices are most vulnerable, because u share token to the device and then someone else use is
With Fiddler u can see all the https data
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | Lassi Uosukainen |
| Solution 2 |