News for hackers. Stuff that matters.
Re:My adventure in designing API keys by swiftcoder on Wednesday April 15, 2026 @04:42AM (#47776318)
> Plain old API keys are straightforward to implement

This is pretty much just plain-old-api-keys, at least as far as the auth mechanism is concerned.

The prefix slug and the checksum are just there so your vulnerability scanner can find and revoke all the keys folks accidentally commit to github.

Re:My adventure in designing API keys by vjay15 on Wednesday April 15, 2026 @05:14AM (#47776581)
yes this is the approach!