The solution we came up with is a proxy server, it forwards requests to the respective API with up to date auth tokens. Because of this:
- Devs can use the full range of capabilities of the underlying APIs.
- They don’t have to deal with registering OAuth apps with a ton of providers.
- Different API quirks are ironed out. Even if two APIs both use OAuth, there are often annoying differences in how you are required to interact with them.
- API Tokens are refreshed automatically if they’re expired.
From our conversations with other devs, there’s a lot more we want to add, like custom API providers (If we don’t support an API yet, we don’t want to block you!) and an embed-able auth component that allows your app’s users to connect their third-party accounts.
We’ve been really excited about the possibilities of this project for making authenticating with Third-Party APIs a little bit less painful. We’d love your feedback on the idea. What do you think of the concept? What have you built using third-party APIs? Which APIs do you want us to support in the future?