Hacker News new | past | comments | ask | show | jobs | submit login

I just use it once, to generate an API key, then use the key, and a server secret (in the basic auth header), after that. The key could be generated by something like Sign In With Apple.

Not Fort Knox, but fairly good.

Because of FastCGI, I have to have an option to pass login creds in the URL, but that is not by default.




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: