Jump to content
  • Sign Up

[Suggestion] Ability to capture an event when an API key is deleted.


peekaay.3471

Recommended Posts

You will be able to tell if an API Key is valid or not, with every request you make. The API will tell you then, that your API Key is invald.

An API should not push information to the client. There is no reason to get the validity of an API key in realtime. It can always be checked when requests are made.

Link to comment
Share on other sites

Agreed, thats just one way to go about it, thats one extra hop from my API, i would cache the other data, but when it comes to auth its not the same, caching auth/api key and assuming its valid isnt an option either, and checking for tokeninfo on every request on my API end, is too much of an overhead since Ive to always talk to GW2. Hope i was clear.

 

Link to comment
Share on other sites

> @"peekaay.3471" said:

> Agreed, thats just one way to go about it, thats one extra hop from my API, i would cache the other data, but when it comes to auth its not the same, caching auth/api key and assuming its valid isnt an option either, and checking for tokeninfo on every request on my API end, is too much of an overhead since Ive to always talk to GW2. Hope i was clear.

>

 

You don't have to call tokeninfo

Take this for example https://api.guildwars2.com/v2/account?access_token=8A0F6DC1-6034-BF48-99FA-ABDF541F13401931E4F6-F174-433A-8563-EDC29561AA92

It directly tells you the key is invalid, no need to call tokeninfo

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...