Skip to content
Search Create account

DEV Community

DEV Community is a community of 605,211 amazing developers

We're a place where coders share, stay up-to-date and grow their careers.

Create new account Log in
loading...

Discussion on: Send e-mails directly from front-end with JavaScript 💥💥

View post Full discussion

Replies for: I'm curious to understand the security of this solution. If I visit your site, could I not take your USER_ID and send emails on your behalf?

Collapse
patricnox profile image
PatricNox •

Very true. An OAuth token should always be used in these API scenarios which does more than only being used for a getter.

Collapse
xr0master profile image
Sergey Khomushin •

What prevents from calling the API using an access token (from OAuth)?