Is client_id something you have to register with reddit?
So you can't, for example have a client_id per user?
What if you as the app maker forced all your users who want to use your app to go register for their free personal client_id for their own personal API use, and then you have them give that client_id to the app along with their OAuth with they log in?
I am just trying to understand why a third party app can't just be a "software shell" that individual users can use to access reddit through their own personal free API limits as if they were just some individual accessing reddit through the API.
Wouldn't you leave the API key, in the server and proxy thru?
That's what I was taught to do, and you give your own tokens to clients to track which client is making that request and block that client if needed.
It seems very dangerous to pass on the reddit API key to the client.
Is there a whitelist? For some reason they're blocking API access to reddit entirely which is annoying as I want to browse certain sites that rely on this API. Why would the reddit API be on these lists?
> Before shutting down your apps, please consider pushing a simple app update to enable specifying a custom client ID and Reddit API domain, as this would greatly simplify setup for allowing users to connect to real Reddit with a custom client ID or to connect to a custom Reddit server.
I wonder why I haven’t seen mention of this anywhere. It’s not clear how open reddit will be with distributing keys, but can’t hurt to try.
Ahhh! Unsurprisingly, It seems like there is already a revanced patch for the Reddit sync app that allows you to use your own API key. So I guess users will just start doing it anyways, but still I wasn't aware of that restriction
You need an API key to access the reddit API. There's no MITM, it's just that requests made through Apollo are tracked to Apollo. And Apollo will be charged for those requests.
Does the API work that way now? The part on your own server used to only be for authentication and clients would then interact with reddit's servers directly. (Haven't done anything recently but used to maintain a moderation bot).
So this thing is advertised as a "Reddit client without using their API", but then it uses the reddit API for everything. The JSON endpoints are part of the API. It's how all apps get the content of subreddits, comments, etc. It's odd that they're still open for unauthenticated access, but I expect that to change.
reply