3 ms·
Lots of people here are saying "just use the SDK." But a good API shouldn't be tightly coupled to a particular client; it should be possible to use the API easi
by jasonhansel 4y ago
Lots of people here are saying "just use the SDK." But a good API shouldn't be tightly coupled to a particular client; it should be possible to use the API easily using ordinary REST calls. If such a signature mechanism is necessary for security, it should be vendor-neutral, so that it can be shared by other providers and built into general-purpose HTTP clients.
- taeric 4y agoThis is somewhat silly. First, it is perfectly straight forward how to do the signature stuff, such that if you really want to, you can. However, this is akin to asking why it is so hard to write a binary against stdlibs on the machine. It is hard because that isn't really an easy ask. And the solutions we made to make the problem tractable are all nicely encapsulated in the SDK tools that we use. Why skip out on them?