I just noticed that I’m seeing thousands of user API requests per day starting April this year in the dashboard security reports. This is very odd and off by a factor of 100 to 1000 from my expectations. How do I get more detailed reports about the high users are requesting keys and which users ar…

[Bild] RBoy: I just noticed that I’m seeing thousands of user API requests per day starting April this year in the dashboard security reports. Just to confirm, you are asking about User API requests and not API requests that have been run with an API key that you have generated for users on y…

Thanks, yes it’s User API requests [IMG_4922]

That seems like too many requests to be coming from the DiscourseHub app. If you have the Data Explorer installed on your site, I’d be curious about the results of this query: SELECT application_name, COUNT(application_name) AS user_count FROM user_api_keys GROUP BY application_name I tested that …

Took some time to get data explorer installed, my rebuild failed for some reason. This is what I see: application_name user_count Discourse - xhanse's iPhone X 1 Discourse - iPhone 1 Discourse - xrett's iPhone 2 Discourse - xave's iPhone 1 Discourse - xixu's iPhone 1 Discourse - …

[Bild] RBoy: Also one users seems to have 2 user_count, does that mean (s)he has 2 API keys (i.e. 2 apps)? There’s two possibilities on that one. Either the user has two iPhones with the same device name OR they uninstalled the app and reinstalled it at some point. In both cases they would ha…

[Bild] RBoy: Is the query returning information for a specific period of time? No, it’s returning details about all active user api keys. Try running the query below: SELECT * FROM user_api_keys I’m assuming it will only return 7 rows. Let me know if that’s not the case. [Bild] RBoy: T…

[Bild] simon: I’m assuming it will only return 7 rows Yes that’s correct, I see only 7 items. Does this mean it’s all kosher. I don’t know the context here, is this a normal load for the forum to handle?

It all seems reasonable to me. For context, I briefly logged into my test site today through the DiscourseHub app. The site has almost no content. I browsed around it for a few minutes and generated 36 User API requests. On a site with lots of content to scroll through, it wouldn’t be unreasonable f…

[Bild] RBoy: Does this mean it’s all kosher. I don’t know the context here, is this a normal load for the forum to handle? Curiosity got the better of me, so I checked a site I almost exclusively use via the DiscourseHub app. I have just shy of 1100 user api key requesrs for the past 24 hours…

Tausende von Nutzer-API-Anfragen und Invalidierung

Unterstützung

ClawdiaWolf (Claudia) 26. September 2023 um 01:32 6

Dafür gibt es zwei Möglichkeiten. Entweder hat der Benutzer zwei iPhones mit demselben Gerätenamen ODER er hat die App deinstalliert und zu einem späteren Zeitpunkt neu installiert. In beiden Fällen hätte er mehrere API-Schlüssel.

1 „Gefällt mir“

Thema		Antworten	Aufrufe
Consolidated API Requests in the thousands yet our site has no active API keys listed, is this a concern? Support	5	560	19. Februar 2023
View API requests per user/API key Dev rest-api	3	552	14. Januar 2022
User API keys specification Integrations rest-api , reference	70	35171	22. September 2025
Allow API use by regular users, not just admins Dev rest-api	7	1297	29. April 2023
Dashboard Report - Consolidated API Requests Data & reporting dashboard-sql , dashboard-reports , sql-query	0	109	23. September 2025

Tausende von Nutzer-API-Anfragen und Invalidierung

Verwandte Themen