Advice for Operating a Public-Facing API
Open link in next tab
Advice for Operating a Public-Facing API
https://jcs.org/2023/07/12/api
https://jcs.org/2023/07/12/api
Avoid OAuth
But what's the alternative? "Use static API tokens" doesn't really say much. What's an actual alternative that doesn't require a custom solution/reinventing the wheel?
Static API tokens ARE the alternative. He's saying oauth is not worth the complexity, and increase the barrier to entry to using his API.
Static API keys are not a new or customer solution, they are the baseline. He's saying stay at the baseline, oauth is not worth it.
This is a nice quick read with some practical advice learned through read world experience. Thanks for sharing.