Securing botpress website integration

Hi everyone, I am very exited using botpress, I have one question, is there any way to restrict the website integration to be done only from some specific domains? Something like CORS to avoid my bot being integrated in other websites?

I have done some test, and I could integrate in a local index.html page any bot knowing just the url and the bot name, is there any other way without enabling login to achieve this? I think CORS should work but not sure how to enable it.

Hey @Daniel_Rassi

There is no built-in mechanism to restrict origins in Botpress.
You will need to put a reverse proxy in front of Botpress (nginx, Cloudfront, etc) and restrict requests based on the Referer header.

Perfect! Thanks for the information!