Ask HN: What is the best way to add authentication to REST API (for mobile)? • Hacker News Board

Re: Ask HN: What is the best way to add authentication to REST API (for mobile)?

#21

Post by franzwong » Wed, Jan 02, 2019, 6:59 AM UTC

May be you are interested in this page https://sushi2k.gitbooks.io/the-owasp-mobile-security-testin...

Re: Ask HN: What is the best way to add authentication to REST API (for mobile)?

#22

Post by etherealkatana » Wed, Jan 02, 2019, 9:53 AM UTC

whttheuuu wrote: post #20

etherealkatana wrote: post #18

Earlier quoted context omitted.

I would prefer a scalable solution. Go with PostgreSQL is my current stack.

huh?

Sorry wrong wording there. I'm currently using Golang (so, no DRF) and I don't want to use Firebase. My question was if I just stored the session tokens in the Postgres DB, will it take a performance hit, or should I store them in an in-memory store like Redis or Memcached?

Re: Ask HN: What is the best way to add authentication to REST API (for mobile)?

#23

Post by hkchad » Thu, Jan 03, 2019, 3:47 PM UTC

throwaway413 wrote: post #17

ianelbert wrote: post #7

Earlier quoted context omitted.

> An API Gateway is pretty Quick to set up, but the industry is moving away from it as a concept. Can you elaborate on this?

Seconded - I’d like to hear more behind your reasoning.

Third - I'm in the 'industry' and would like to understand that more.