Skip to content

Conversation

@alanjds
Copy link

@alanjds alanjds commented Jun 11, 2014

Providing public_key AND secret_key leads to trouble.
See: https://groups.google.com/d/msg/disqus-dev/9HBAftO0jr0/gD_j-rWdSqsJ

Question: should we get rid of public_key mentions on the whole codebase?

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Well, this doesn't warn them if they omit both. Not sure if it is necessary, just pointing out.

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are right.

I cannot find out an entrypoint that does not require at least the public_key, but here is said that Disqus "recommend using SSL for all requests to the API, but it is not required for anonymous requests.".

Question is: what "anonymous requests" means? If nothing can be hit without public or secret key, is safe to raise an exception for this case.

If someone can confirm that, I will happily update the PR to raise an exception for no key provided, or at least put one more warning.

@mattrobenolt mattrobenolt force-pushed the master branch 2 times, most recently from 0ba26c4 to ae338e0 Compare September 29, 2014 10:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants