Hacker News new | ask | show | jobs
by amarcus 4079 days ago
I am unsure if any such pre-built solutions exist but, we have created something similar for our app.

A user can setup an unlimited number of different API Keys for their account. For each API Key, we allow them to specify:

- Name/Description: For internal reference

- High Level Permissions:

Admin: (access to make any account updates).

Read-Only: (provide read-only access to the data).

Write Only: (allows for read & write operations).

- Low Level Permissions:

Access to various end-points that can be turned on/off.

- Throttling Options

Allow the user to specify Max Read Requests p/second and max write requests p/second

1 comments

Very nice, thanks @amarcus - do you have any public-facing documentation I could review?