News for hackers. Stuff that matters.

dhruv_tek

dhruv_tek on Hacker News

How do devs manage multiple API keys?

Posted by dhruv_tek on Monday November 14, 2022 @12:24AM
from the self-post dept.

Hey all, just curious to know how devs here are managing their APIs? Once we start hooking into multiple APIs, the amount of API keys / secrets / OAuth connections becomes cumbersome to manage. Wondering what measures people are taking with making management of these connections easy and also secure these keys, especially with potential remote working developers etc.

( Read More... | 1 comment | on HN )
Re:The difficulty of switching authentication providers on Tuesday June 28, 2022 @10:48AM (#31908404)
Not true! We have written this piece that talks about the security of magic links and how they can be used: https://www.ezid.io/resource/are-magic-links-secure
Re:The difficulty of switching authentication providers on Tuesday June 28, 2022 @08:35AM (#31906836)
Yup, you actually can do it. I've seen a few enterprise level companies do it without SSO, especially for their invite user feature. Much easier to have he invite a new user to be done passwordless than the usual onboarding flow
Re:Password managers vs. going passwordless? Which do you prefer and why? on Friday April 15, 2022 @11:16PM (#31049076)
Loginless? I didnt quite understand that.
Re:Password managers vs. going passwordless? Which do you prefer and why? on Friday April 15, 2022 @11:16PM (#31049074)
Completely agree with webAuthn! Absolutely love that user experience and I feel like even if its not with a YubiKey, almost all devices have biometrics in it. We should be leveraging that
Re:Do devs/tech pm understand our website? on Thursday April 14, 2022 @02:39AM (#31023997)
I get what you mean. Sometimes this whole email flow could be more annoying for some users than a simple password but I honestly hate thinking of passwords and the UX behind password managers.

But thank you for your honest feedback! Always appreciate it and I really hope we can make Webauthn (biometrics login) the norm which is a wonderful experience.

Thanks again!!

Re:Do devs/tech pm understand our website? on Wednesday April 13, 2022 @07:40PM (#31021681)
Hey, thank's for that! If you don't mind me asking could you share how we could improve it. Thank you in advance

Our beta users hacked our APIs for something we didn't even know we could do

Posted by dhruv_tek on Wednesday March 23, 2022 @07:58AM
from the self-post dept.

Hey all, I'm Dhruv and also the Co-Founder at EZiD (https://www.ezid.io/). We actually started this because all of us hated passwords and built our APIs thinking that users would only use it for simple passwordless sign up and login and we even got a few beta users who switched from Auth0 or their own custom auth methods to try us out because they believed our APIs were a lot more...

( Read More... | no comments | 2 points | on HN )