1

Let's say we've already deployed Heroku app and got public link Are there the ways to restrict somehow GET request?

Improve this question

1 Answer 1

Reset to default
2

You can control ingress to your service by placing the service in a Heroku Private Space. Then, at the Space configuration level, you can identify specific ingress ranges:

Heroku private space configuration

Note that Private Spaces come with additional costs that may be substantial.

Your application is always free, of course, to implement its own authentication and ingress control in code.

Improve this answer
2
  • Thanks, @David Reed. But lets say , that our heroku app is expected to be invoked from 3d party app and it isnt possible to set ip ranges up. What can we do in this case? Of cause we are not able to provide some extra header values etc
    – pincet
    Commented Jul 20, 2023 at 15:21
  • 1
    You can write code in your application to enforce whatever authentication mechanism you prefer. My answer is from the Heroku perspective; I can't speak to your specific stack and architecture.
    – David Reed
    Commented Jul 20, 2023 at 15:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .