I assume that I need to allow the connection IP from the server side somehow right? Otherwise everyone would be able to use the domain to subscribe for the data Is that then related to cors?
Hm? You were planning to whitelist every IP address of your mobile user?
CORS applies to browsers, don’t know if it applies to React Native - you’d have to test this and see if the developer console comes up with a CORS error.
So anyone can in theory connect to my socket server for events? For now it doesn’t really matter for my use case as it’s not data sensitive, but I wonder how this is solved when this needs to be secured
Anyone that can access your website can access your socket server for events. I don’t know how or if Wappler has any sort of authentication for this, or if the events themselves contain sensitive data or just tell stuff like “reload this server connect called sc_chat”
Also, CORS doesn’t prevent someone from sneaking in your events, it only prevents another website from connecting to your website events