I am writing a public facing web site in sharepoint 2010 and using JSOM to access data from lists, Things are working and now trying to deploy on production server, server has strict security settings for anonymous users and anonymous users have no access to _vti/_bin folder.
Following article says it is not a good idea to use JSOM for public facing web site. https://docs.microsoft.com/en-us/archive/blogs/kaevans/what-every-developer-needs-to-know-about-sharepoint-apps-csom-and-anonymous-publishing-sites#enabling-csom-for-anonymous-users
Is there any way to get around this issue, or I have to rewrite whole application?
I could not find any reason to block _vti_btn folder, an article is availble on MSDN but that targets sharepoint 2007 only, nothing for sharepoint 2010.
I have checked in developer tool bar that client.svc and sites.asmx are used to read items from the list, I will try to convince my client to block whole folder except these 2 services, another important thing I have found is that these services can only be used from my sharepoint application, user cannot read list information by typing url in the browser.