this post was submitted on 12 Jul 2023
35 points (97.3% liked)

Technology

59594 readers
2971 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
35
Advice for Operating a Public-Facing API (jcs.org)
submitted 1 year ago by [email protected] to c/technology
3 comments fedilink hide all child comments
all 4 comments
sorted by: hot top controversial new old
[–] d3Xt3r 6 points 1 year ago (2 children)

Avoid OAuth

But what's the alternative? "Use static API tokens" doesn't really say much. What's an actual alternative that doesn't require a custom solution/reinventing the wheel?

[–] [email protected] 1 points 1 year ago

Static API tokens ARE the alternative. He's saying oauth is not worth the complexity, and increase the barrier to entry to using his API.

Static API keys are not a new or customer solution, they are the baseline. He's saying stay at the baseline, oauth is not worth it.

[–] psysop 2 points 1 year ago

This is a nice quick read with some practical advice learned through read world experience. Thanks for sharing.