[Request] New chat api endpoint: is_token_valid
zejt3k
dtr
{190622.0434}
A few times now I've found myself making a chat API bot that is effectively "post-only", it never polls. For example, the chat bridge on discord is post-only. Advertisements can be post-only, etc.
The problem with post-only bots is there's no good way to check "right now" if the chat token is still any good. If you poll, you find out when it dies fast, but if you have a thing that only posts every few days and never polls, you never get a warning that the token expired until you need it and it fails. There are ways around this -- do polls that you ignore, etc -- but they are all relatively heavy. Waste of server resources.
What I'd like is an endpoint that just checks token validity. Bare minimum work on the server. Have a very limited *global* rate limit for invalid tokens (to prevent using it to brute tokens), but just use the poll rate limit if the token is valid. This way, post-only things can check in every hour or so using a known light-weight endpoint to verify that their token still works, and alert the user as early as possible when they expire.
(If it included *when* the token expires, that would also be amazing, but a part of me is worried that might be exploitable somehow. Like, if a token is leaked, then the "spy" can prepare for when the token expires rather than being caught guessing)
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -