News for hackers. Stuff that matters.

A comment on Ask HN: What do you use for API Key Management?.

Re:Ask HN: What do you use for API Key Management? by ezekg on Thursday September 29, 2022 @05:52PM (#33027789)
API key authentication is not very hard, and is typically pretty application-specific.

What is stopping you from doing it in-house?

[ Parent | on HN ]
Re:Ask HN: What do you use for API Key Management? by dsinghvi on Thursday September 29, 2022 @06:47PM (#33028371)
It seems like in-house is the way to go since there are no other alternatives.

Things we would have to build:

  - Generating API Keys (with expiry)

  - Storing API Keys securely

  - Revoking API Keys 

  - Adding metadata to API Keys
It seems like there could be a generic API to power all of that, while still enabling applications to be opinionated about whether the incoming request is authenticated and has the right permissions.
[ Parent | on HN ]