security issue (API key restrictions) not working w/ cloudflare + store locator | WordPress.org

Resolved techdevicerepair
(@techdevicerepair)

2 years, 11 months ago

We need a proper solution.. looking all over found this

This is terrible! https://wordpress.org/support/topic/map-and-apis-working-but-search-result-cant-load-google-maps-correctly/

the resolution of this ticket was that they removed the restrictions!! LMAO anyone with their keys can use the API on any site now …

NOT AN ACCEPTABLE solution… I have been trying to find out how to set the headers properly and can not…

so basically if your site lives behind cloudflare, and you set restrictions they are not proper and you will get restricted access on your website in store locator or other google maps APIs, as Cloudflare messes with the headers.

I need a proper solution to the google API key restrictions to have store locator work with cloud flare + api key restrictions.

this is a cloudflare issue rather than a WP or storelocator issue but I cant get the info I need online.

Viewing 4 replies - 1 through 4 (of 4 total)

Thread Starter techdevicerepair
(@techdevicerepair)

2 years, 11 months ago

Just to add this is the closest solution.. with no real meaning on how to add the headers. https://community.cloudflare.com/t/protect-your-google-api-key-on-cloudflare/221280/2

Plugin Author Tijmen Smit
(@tijmensmit)

2 years, 11 months ago

In what format did you set the domain restriction?

*.domain.com/* https://domain.com/* or ?

Thread Starter techdevicerepair
(@techdevicerepair)

2 years, 11 months ago

Used the singularity and combination of both. with the www and non-www with wildcards * and without.

also tried IP restrictions, Regular IP and nslookup to get the proxy IP’s and use IPs instead, all of which failed.
Thread Starter techdevicerepair
(@techdevicerepair)

2 years, 11 months ago
your confidence in your answer allowed me to take another look:

Selected APIs:
- Geocoding API
- Geolocation API
- Maps Embed API <—— this API was not enabled.
- Maps JavaScript API <—– this API is what I thought it used.
- Maps Static API
- Places API
Added… and now it is working… WOW!!!!!!!!!!

hope this helps someone else.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘security issue (API key restrictions) not working w/ cloudflare + store locator’ is closed to new replies.

4 replies
2 participants
Last reply from: techdevicerepair
Last activity: 2 years, 11 months ago
Status: resolved