Q: 'Magic Link' security

Firstly, I just want to say that the magic link is a game changer. It certainly opens up lots of opportunities and it's really helped me to get rolling!

I was hoping to provide the Markupgo workflow as a service to others, while using my templates the user will render the image with their own variables.

Is there any wway to protect the final URL? If someone stops to consider their inputs and the variables within the URL they might see that they can bypass me and use all my credits by changing small aspects and re-rendering.

How can this be avoided? is there any workaround or ability to redirect to a URL that is not so obvious to manipulate by the user?

I hope this made sense. Thanks!!!

112481922371292239484Aug 31, 2024
Founder Team
togedir

togedir

Aug 31, 2024

A: Hi there! I'm glad to hear that you're enjoying the Magic URL feature. 🚀

You're right, if you expose the Magic URL directly, anyone with the URL can generate images or PDFs using your template and consume your credits. We just updated the documentation with the security considerations and some approaches to secure the Magic URL. Please see the https://markupgo.com/docs/magic-template-url#security-considerations section for more details.

TL;DR: Exposing the Magic URL is at your own risk but we have some approaches to secure the Magic URL by using the `json=true` and `redirect=true` query parameters.

Share
Helpful?
Log in to join the conversation
Posted: Aug 31, 2024

Wow, thankyou for providing this workaround. It works absolutely perfectly. Amazing!

Literally took you a few hours to provide a solution, give 2 variations and add it to your documentation....whilst questions ive asked other devs from other apps here, still waiting for response for 3 weeks. Great job guys!!

Founder
Posted: Sep 1, 2024

Hi 112481922371292239484 🙌

This makes us so happy to hear! We're glad we could help you out so quickly. Would you mind sharing your feedback in a review? We'd really appreciate it! 😊

Posted: Sep 1, 2024

100%

Founder
Posted: Sep 4, 2024

Looks like you forgot about us 🥲

Posted: Sep 5, 2024

Hi, Sorry....You've been on my mind, i'm just waiting... because I explored your product on the free trial. So I'm just getting the cash together for the Lifetime purchase. As soon as I purchase here, I will make it rain tacos. 💦🌮