So I was talking with Ucan and he suggested Ched adds a 2nd api key per user with less access
Well..
I expand on this. Just like with other web services perhaps we could create api profiles for ourselves.
Users can go and create a new profile, with a new key, and set WHAT access that key gets. Then users can share different keys with different services (or even people they trade with or something)
The original key which gives full access stays as is, as we know most users wouldn't understand. But for those of us who build tools for our own factions then it gives us ways of accessing things like nerve bar, without giving stats away or money on hand, which is the main reason I hear when people don't want to sign up to tornstats etc.
I doubt this would mean many changes to the api itself, so the work involved would be building something to manage these profiles and ensuring that wherever they are stored can cope with multiple keys per user..
I assume there is already some kind of check in place for public vs private info, so prolly some small tweaks there to incorporate some groupings of api permissions..
thoughts, feelings and notes?
API keys should have specific access right associated to them. They should also be created and able to be deleted with those certain access rights. Right now it's an 'all or nothing' approach.
I'd like to see a write api as well, but I know we are trying to prevent automated playing so that might not make much sense.
Very good idea.
I see that useful for faction management like getting energy/drug CD of members for chain watch. Or drug addiction for directors...
Have wanted something like how eve does it pretty much since the api came out so yes please.
A write api that could make sense are stuff like chatbox (for discord chatroom sync, mainly i look for read access), forum access (questionable), mail (customized mail per user using some code to replace variables): they are all informational, and don't directly affect gameplay too much. This api would still fall under spam prevention, and probably would share the same (or even longer) cooldown: you wouldn't beable to use the write api to send a mail message, if you already sent a mail message.
Other stuff can be chat management (request multiple chat windows to be closed), adding friends (not enemies though, since the enemy list does have an in game impact.. still can be discussed).
So a write API does make alot of sense, as long as it is kept away from the main body of the game.
I don't agree.. even those things can break things in game
Have you looked at trade chat recently? ewww
its why i highlight read, more than write. think of this in terms of faction chat and communication, not the messy public chat rooms