Submitted by michael on Wed, 08/25/2021 - 09:34 URL https://fly.io/blog/api-tokens-a-tedious-survey/ Excerpt t’s 2021 and so I don’t need to tell you that having your API pass a username and password through HTTP basic authentication is a bad idea. Your tokens should look large and random, whatever they are.