3 ms·
Authentication is just one piece of the "protecting your APIs" puzzle. Other pieces including rate-limiting and billing. Those are more challenging.
by intrasight 5y ago
Authentication is just one piece of the "protecting your APIs" puzzle.
Other pieces including rate-limiting and billing. Those are more challenging.
- suyash 5y agoYes, also don't forget securing API credentials properly. As a matter of fact, I have a blog post coming about this topic soon.
- mooreds 5y agoWould love to see it. Whether tokens or API keys, I'm always interested in how folks recommend securing them. There's also some interesting stuff around token binding happening. DPoP is moving towards becoming a standard: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-07 https://datatracker.ietf.org/doc/html/draft-ietf-oauth-dpop-...