Help get this topic noticed by sharing it on
Twitter,
Facebook, or email.
Twitter,
Facebook, or email.
Restrict users
I don't want all users to be downloading the add-in. I there a way to restrict user access, say only users with a special code will be allowed?
-
Yes, you can go to the 'publish' tab on your apps dashboard. That page has a chunk of code for you to embed on your own site.
You can then write some kind of condition whether to show it or not.
In your example, count how many people installed it, and if its over the quota hide the code. -
-
Just to add on this: end users will still be able to install your extension via direct link. If the restriction is critical then you should consider adding the restriction into your extension code.
Also, if you tell us what are your needs re restricting users and other developers will "vote" for it, we will be happy to add it soon -
-
I figured that the direct link will still remain public.
My extension is a specific implementation for an "x" site users. Unless those users are members of the site I don't want them to be downloading the extension. Of course there is code protection, but I rather them not to be downloading it in a first place.
Thanks -
-
There is no easy integration for your need.
I guess the best way for you at the moment is:
1. Set your extension "invisible" ("Make This App Invisible" checkbox at the right bottom of your 'Settings' tab) so no one will be able to download it from Crossrider default installation page
2. Add logic to your code to verify this user is indeed user of this site. If you are the owner of the site then you can verify the domain with Crossrider and simply check for the login cookie of the user. It should be that simple :)
Let me know if you need any help with verifying the domain and/or reading cookies from your own site from the extension. -
-
But the download links can be enumerated. How is this in any way secure? Anyone can read the JS. Can you just make those links inaccessible and put a token around them?
-
-
Jacob,
Currently it's publicly accessible like any client-side extension but in the future we will add authentication which will restrict the view of the code publicly.
This is already in our roadmap but will take some time to implement.
Thanks for your feedback. -
Loading Profile...




EMPLOYEE
EMPLOYEE
EMPLOYEE
