I was going to submit some of my games to kongregate with the high scores and challenge APIs. I want to restrict these version so that they can only be played on kongregate (I know it sounds a bit paranoid but I’ve had incomplete versions of my games stolen and hosted before, and since they’d be using the kongregate api the highscore wouldn’t work on other sites). Usually this would be easy, I’d just check for the domain in the _url property as I’ve done for versions on my site, but this doesn’t seem to work.
I’m allowing http://www.kongregate and http://kongregate as ok domains, but this doesn’t seem to work. Should I be looking for something different? Is there any way I could protect the game using the kongregate API?