I’m hoping to clarify when and for what purposes the two Discourse API Authentication systems operate. [圖片] API CORS Headers Incorrect We have two different API authentication systems, which can be confusing. (from here ). This is my best understanding: The Admin API , sometimes also referre…

[圖片] JQ331: But I believe it’s fine to use the Admin API with javascript clients so long as the owner of the app the javascript clients use also controls the forum. (ie, the owner of the separate app is the same as the owner of the forum.) Right? If you ship an API key in your application it …

[圖片] sam: The user API is immune to this problem, user approves the application and then gets an dedicated API key generated. What is the key use case for the Admin API? In my case, I am using it to: Add things to my forum, by making API calls that send data I show on my forum. An alternat…

[圖片] JQ331: Allow a separate app I have to interact with my forum. [圖片] JQ331: In both cases, the user API would not work, User api was designed for this, see the source code of Discourse Hub for a reference implementation.

What is the admin api designed for?

Admin API is for server-to-server interactions, e.g. calls made from the backend of a website.

双 Discourse API 系统的用途

支持

sam (Sam Saffron) 2020年六月23日 06:37 2

如果您将 API 密钥打包在应用程序中，黑客很容易从应用程序二进制文件或网络协议中提取该密钥。

用户 API 则不受此问题影响：用户授权应用程序后，系统会为其生成专用的 API 密钥。

Using JavaScript fetch to get publicly available page from Discourse into an external site (Discourse API)

話題		回覆	觀看
Allow API use by regular users, not just admins Development rest-api	6	1541	2023年二月14日
User API keys specification Integrations rest-api , reference	69	37748	2025年九月22日
Create apikey for user programmatically as admin Development rest-api	8	2118	2024年二月26日
Can non-admin user issue their own API key? Development rest-api	13	2936	2021年九月2日
Online User API? Development	2	1966	2016年三月20日

双 Discourse API 系统的用途

相關主題