WPB 11.5 standalone - Limit REST API to a few IP address

[ccto]

Hello All,

For security reason, is it possible to limit the Web Presence Builder (standalone) REST API to a few IP address (e.g. billing system)? via .htaccess or else?

Thank you very much for your kind attention.

 

[Egor Chernodarov]

I think you can do this with WPB vhost configuration. Template of this vhost you can find here: /usr/local/sb/utils/sitebuilder.conf
Also you can put right now .htaccess into /usr/local/sb/htdocs and it should work (I suppose).

 

[ccto]

Yes, I manually added the following twice in virtualhost section in zz011_sitebuilder.conf

        <LocationMatch "^/api/5.3">
                Deny from All
                Allow from x.x.x.x
                Allow from 127.0.0.1
                Allow from localhost
        </LocationMatch>

It works fine.

Thank you

 

[Egor Chernodarov]

Please note that zz011_sitebuilder.conf will be automatically overridden in some cases (usage of "sb_config" utility with some options, upgrades, etc). Therefore I recommend you use /usr/local/sb/utils/sitebuilder.conf template...