Hi Playfab, Can you help me with 2 problems?
Are failed playfab login Api calls charged? (Wrong account, password, account doesn't exist. A competitor can attack login multiple fake accounts to make multiple Login Api calls which can lead to large costs if charged. )
Will Azure Functions be charged for making calls the wrong way? (Competitor makes calls to Azure Function from playfab but wrong Account Entity information) Thanks
I have tried making a lot of fake calls with wrong account and password. Cloudscript calls wrong Entity token. But when looking at the paid call statistics in the Upgrade account, the fake calls and errors are still counted. So Playfab is not safe, each person's Title can be exposed and millions, hundreds of millions of fake calls come. The money bag will be torn
In fact, you don't have to worry about the Competitor calling multiple APIs and incurring expensive fees. Our API has request limits (you could check the limits in [Game Manager]->[Your Title]->[Title setting]->[Limits]), this can prevent an API from being called multiple times over a period of time. Also, you can use API access policy to disable certain APIs (which you don't need). If you really have concerns about this, welcome you to create a support ticket for help.
I have tried making a lot of fake calls with wrong account and password. Cloudscript calls wrong Entity token. But when looking at the paid call statistics in the Upgrade account, the fake calls and errors are still counted. So Playfab is not safe, each person's Title can be exposed and millions, hundreds of millions of fake calls come. The money bag will be torn
23 People are following this question.
