we are using SSO, and basically both (discourse and FE) are on the same server, so no need for CORS, but still i was not able to create post without api_key, so i thought it is safer to use api_key of specific user.
Are you saying that there is a method for creating post without using api_key?
If i am sso logged in to discourse, of course