News for hackers. Stuff that matters.
Re:Show HN: I made a credit system API by lwansbrough on Wednesday August 07, 2024 @01:15PM (#41183359)
If you’re intending for your API to be server to server then it’s not an issue. But that may limit uptake from mobile devs who may be looking for a more plug and play solution to dodge the need to build their own infra.
Re:Show HN: I made a credit system API by fraromeo on Wednesday August 07, 2024 @05:41PM (#41185876)
I intend it as server to server but you made me think about this specific case. I might have found a solution that bypass and solve the problem you are referring to but I need to deeply think about it. Not only needs to be secured the API Key (which is solved by the solution I have in mind), but also the content/payload of the request (otherwise the client would change the amount of credits).