c/technology · by quisquous@discuss.tchncs.de · 3y

Advice for Operating a Public-Facing API

https://jcs.org/2023/07/12/api

35 points · 3 comments · view on lemmy.world

3 Comments

d3Xt3r@lemmy.world · 6 pts · 3y (2 replies)

Avoid OAuth

But what's the alternative? "Use static API tokens" doesn't really say much. What's an actual alternative that doesn't require a custom solution/reinventing the wheel?

AccidentalLemming@lemmy.world · 2 pts · 3y

[ removed ]

Ucinorn@aussie.zone · 1 pts · 3y

Static API tokens ARE the alternative. He's saying oauth is not worth the complexity, and increase the barrier to entry to using his API.

Static API keys are not a new or customer solution, they are the baseline. He's saying stay at the baseline, oauth is not worth it.

psysop@lemmy.world · 2 pts · 3y

This is a nice quick read with some practical advice learned through read world experience. Thanks for sharing.