Remix.run Logo
lukewarm707 10 hours ago

i have seen this so many times...

i'm thinking it's time we replaced api keys.

some type of real time crypto payment maybe?

trick-or-treat 10 hours ago | parent | next [-]

Prepaid only is a fantastic idea, especially for dumb-ass startups. Limiting your liability to $100 or so sound like a big-ass W.

eru 10 hours ago | parent | next [-]

Yes, pre-paid would be fine and it's a well-understood pattern.

No need to retire API keys.

owebmaster 10 hours ago | parent [-]

Nobody is thinking about the stock owners, I see

100ms 10 hours ago | parent | prev | next [-]

Implementing this in any meaningful manner quickly begins to look like every read becoming a globally synchronised write. Of course it doesn't have to be perfect, but even approximating perfection doesn't look much different. Also, can you imagine the kind of downtimes and complaints that would inevitably originate from a fully synchronous billing architecture?

eru 10 hours ago | parent [-]

> Of course it doesn't have to be perfect, but even approximating perfection doesn't look much different.

It's pretty easy to get right, if the provider allows you to go (slightly) negative before cutting you off.

> Also, can you imagine the kind of downtimes and complaints that would inevitably originate from a fully synchronous billing architecture?

Doesn't need to fully synchronous.

christkv 10 hours ago | parent | prev | next [-]

Open ai has this

freedomben 10 hours ago | parent | prev [-]

Prepaid only is a fantastic idea, until your site goes (desirably) viral and then gets shut off right as traffic is picking up, or you grow steadily and forget to increase your deposit amount and suddenly production is down. Billing alerts are a much better solution IMHO.

trick-or-treat 10 hours ago | parent | next [-]

No you big dummy, that is especially when you want to limit your liability, lol.

Because these days it will be all worthless bot traffic.

dummydummy1234 10 hours ago | parent | prev | next [-]

Prepaid/paid limits with shutoff is appropriate for this though.

If you have per key limits, this is not possible, and even in a wild situation you should b able to expect that your firebase key will not use 50k.

lisdexan 10 hours ago | parent | prev | next [-]

Let me choose. This common point seems more like a rationalization for the default behavior of hyperscalers. AWS isn't avoiding prepaid due to concern about my site's virality, just that prepaid = less money.

microtonal 10 hours ago | parent | prev [-]

You can also have both, a cap and one or more billing alert levels below it. Some providers do this (e.g. IIRC Backblaze B2).

freedomben 10 hours ago | parent [-]

Yes in reality, and ideally, you can have both, but GP specifically said "Prepaid only" implying you can't have both (which is what I replied to)

eru 10 hours ago | parent [-]

Well, they should also have pre-paid only. Offer a few different options.

freedomben 10 hours ago | parent | prev [-]

Oh please no. And the "alternatives" to API keys aren't going to help much either, they'll just add friction to getting started (as reference: see the pain involved in writing a script that hits gmail or calendar API)