Authenticate to API via API key
Open
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 1.3k
- Forks
- 245
- PR merge metrics
- No merged PRs in 30d
Description
Hi,
it would be nice to authenticate to the API via an API key. At the moment you have to use a Cookie and the X-CSRF-TOKEN. This is not so nice, because they could become invalid after the session ends.
An alternative would be a cookie and CSRF-token who never get's invalid, but I would still prefer a proper API key :)
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue does not name files, tests, or an API entry point. Start by locating the current cookie and X-CSRF-TOKEN authentication flow, then determine the API-key design and its lifecycle requirements. Done means API clients can authenticate with a properly documented API key without relying on a session cookie or expiring CSRF token.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, authentication
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100