# Newly enforced api\_username restriction?

**URL:** <https://meta.discourse.org/t/newly-enforced-api-username-restriction/168295>\
**Category:** Development\
**Tags:** rest-api\
**Created:** [October 26, 2020, 3:51pm UTC](https://meta.discourse.org/t/newly-enforced-api-username-restriction/168295 "2020-10-26T15:51:13Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![blake](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/blake/32/157322_2.png) [@blake](https://meta.discourse.org/u/blake)\
**Post date:** [October 29, 2020, 12:30pm UTC](https://meta.discourse.org/t/newly-enforced-api-username-restriction/168295/5 "2020-10-29T12:30:14Z")

</div>

One other thing I just thought about is the `revoke api keys days` site setting. Because that user doesn’t exist, we never update the last used date for that key and I bet the key was auto revoked? I’m still not sure how you would have been able to make valid request in the first place though.

---

_[View the full topic](https://meta.discourse.org/t/newly-enforced-api-username-restriction/168295)._