Click to call attacks prevention

[mbedial]

Hi,
we are developing a click-to-call webapp for one of our customers.
We are worried about potential attacks to our systems and we don't want to include a captcha control before the click to call (avoiding bots).
Does WCS support any kind of protection against these kind of attacks? We want to use WCS as webrtc to SIP GW connected to asterisk.
Thanks in advance
Mario

 

[Max]

Hello

There is no protection system out of the box. You can implement a kind of protection using REST Hooks.
With the REST Hooks, each call and each websocket connection to WCS server will do REST HTTP request to be approved by your back-end.

Here you can see authorization example:

Using REST hook to authorize user by domain - Web Call Server 5.2 - EN - Flashphoner Documentation

docs.flashphoner.com

So if you receive too many call() or connection() attempts per second, you can just decline such requests on your back-end.