Hacker News Reader

Your license requirements are unenforceable. App developers can create apps that automate requests against your endpoints without having to agree to your ToS.

Even if you add an account and API key system, as long as it's free to sign up, apps can also automatically register accounts to get API keys.

View on HN

Correct. This cannot be prevented.

Also for API keys you can just search for keys from basically any weather API and you will find credentials on GitHub. People also sign up 10x for free API services to circumvent typical request limits per day.

At some point I may have to block certain IP addresses or HTTP Origin referrers because of abuse.

Reply on news.ycombinator.com