Hey there guys,
So I want to secure my API based on the website host server.
[client] ------> [website] -------> [Slim API]
what i need to do is to get the website ip/domain, not the client Ip neither the API Ip ^^
I try $request->getIp() but it return me the client Ip
I also try the $request->getUrl() but it return me the API Url
I’m working with PHP and using middleware. but this middleware condition need to be based on the website host server ip. Why? cause our product is a whitelable website. so we can have multiple domain name, so my guess would be to allow all the request but only those made from our website.
I hope you can help me with this ^^