you can secure it on a user by user basis, but limited only to which commands that user can run  the attrs are:

jsonrpc-allowed-jsapi
jsonrpc-allowed-fsapi

for fsapi commands and jsapi commands.

if you look in the default configs you can see similar settings put in at a global level, the same is possible per user:

conf/testing/directory/default.xml:5:    <param name="jsonrpc-allowed-methods" value="verto"/>
conf/vanilla/directory/default.xml:26:      <param name="jsonrpc-allowed-methods" value="verto"/>
conf/vanilla/directory/default.xml:27:      <!-- <param name="jsonrpc-allowed-event-channels" value="demo,conference,presence"/> -->



On Oct 31, 2016, at 3:00 AM, Donny Hardyanto <hardyanto.donny@gmail.com> wrote:

Hi all,

Is it possible to run JSAPI via verto? Is it as powerfull as Event Socket? Is there any way to secure it? I like to deploy the verto webrtc to website, but dont want any one can abuse and control my FS box via JSAPi/verto.

Thanks,

Donny
_________________________________________________________________________
Professional FreeSWITCH Consulting Services:
consulting@freeswitch.org
http://www.freeswitchsolutions.com

Official FreeSWITCH Sites
http://www.freeswitch.org
http://confluence.freeswitch.org
http://www.cluecon.com

FreeSWITCH-users mailing list
FreeSWITCH-users@lists.freeswitch.org
http://lists.freeswitch.org/mailman/listinfo/freeswitch-users
UNSUBSCRIBE:http://lists.freeswitch.org/mailman/options/freeswitch-users
http://www.freeswitch.org