Unable to customize User-Agent

[velopechip]

A JavaScript application running in a browser context cannot set a custom value for the User-Agent string. What are the implications for a JavaScript application that uses the weather.gov API but is unable to set a custom User-Agent value. Are there any other methods available to authenticate requests?

[dwhitemv25]

As long as the query volume is low, I don't believe there is any issues with browsers querying API directly. But if there are problems you have little to no visibility.

I know the heading says "authentication" but there is no signup or registration required for user-agents. Anything works. Caching and rate limiting use user-agent as part of the key.

If the long-promised API keys get implemented however, it becomes a security problem. You don't want to put API keys in browser JavaScript, they tend to get stolen.

[velopechip]

Thanks. The API docs say rate limits are unpublished. Are there any community observations with respect to these limits?

[scadergit]

If the long-promised API keys get implemented however, it becomes a security problem. You don't want to put API keys in browser JavaScript, they tend to get stolen.

All tbd, but I would expect to that solution to only require an API key for better rate limits, while still allowing anonymous access from browser with strict limits.

[joepperkins]

weather.gov API will need to look for a custom header is the only option From: velopechip ***@***.***> Sent: Friday, March 21, 2025 2:53 PM To: weather-gov/api ***@***.***> Cc: Subscribed ***@***.***> Subject: [weather-gov/api] Unable to customize User-Agent (Discussion #806) A JavaScript application running in a browser context cannot set a custom value for the User-Agent string. What are the implications for a JavaScript application that uses the weather.gov API but is unable to set a custom User-Agent value. Are there any other methods available to authenticate requests? — Reply to this email directly, view it on GitHub<#806>, or unsubscribe<https://github.com/notifications/unsubscribe-auth/ADJHCG5TCE2JWJKRK4DDNKD2VSC5RAVCNFSM6AAAAABZQ7FKJ6VHI2DSMVQWIX3LMV43ERDJONRXK43TNFXW4OZYGEYTKNRTGE>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.******@***.***>>