4 ms·
API keys usually exist for preventing abuse. By exposing an authenticated API proxy you're allowing anyone to abuse someone else's API using your key, likely le
by gnubardt 15y ago
API keys usually exist for preventing abuse. By exposing an authenticated API proxy you're allowing anyone to abuse someone else's API using your key, likely leading to them banning you. At a minimum you should implement your own rate limiting.
The article describes how to set up caching in nginx, so not every request to nginx goes to the external service.
- tdfx 15y agoThe potential for abuse remains.
- RyanKearney 15y agoThen don't use it. As someone who has never had much experience dealing with Nginx I found this article to be very informative. Most people are smart enough not make public their third party apis. Those who aren't will quickly learn of the problems this may have. However, there are some cases where this could be extremely useful, such as an intranet.
- tdfx 15y agoI agree the article is very informative and taught me a number of things I didn't know about nginx. Unfortunately letting people learn the hard way tends to not work out well when it comes to security.