To secure, would a manually generated API key work? Or would something more secure be necessary?

A shared secret and HTTPS are probably enough. If there is no other consumer of the API we may be able to do something that also requires the requests to come from a limited number of IP addresses which would make abuse more difficult if the secret leaked somehow.

Striker would need to interface with my tool via an API.

Do you have the Python/Django knowledge needed to write the code for the Striker side, or would you need to find someone to help with that? I can certainly do some design review and code review, but I can't sign up to do the user interface design and coding.

In T157847#3018722, @bd808 wrote:

To secure, would a manually generated API key work? Or would something more secure be necessary?

A shared secret and HTTPS are probably enough. If there is no other consumer of the API we may be able to do something that also requires the requests to come from a limited number of IP addresses which would make abuse more difficult if the secret leaked somehow.

Okay, that sounds good.

Striker would need to interface with my tool via an API.

Do you have the Python/Django knowledge needed to write the code for the Striker side, or would you need to find someone to help with that? I can certainly do some design review and code review, but I can't sign up to do the user interface design and coding.

Let me take a look at the striker code and get back to you. I know some python, but no Django.