What does Public API mean?

[thwl]

Does Public API mean that anyone can see my app ID, database URI, all keys and app data?

What info are available to the public when the app is set to Public API?

[Davi Macêdo]

Hi @thwl

In the future we want to be like the Github for APIs. A place in which the developers would be able to build, collaborate, host and share public and private backend code and API using Parse Server framework.

Now we have just a simple version of the hub (https://www.back4app.com/hub) to start testing the concept, but in future you can imagine that it will have Github alike features.

Private APIs will be charged and public APIs will be free. When you turn some API public, all other developers will be able to use or fork it. The idea is not only provide a easily way to build APIs using Parse Server but also provide a huge amount of public ready-to-use APIs.

Currently, when you turn the API public, the unique informations are shared: app id, client key, classes available and classes data. You can secure your data using CLP. For example, if you have some sensitive data, like user's e-mails, you can just secure them using CLP. Since other developers don't have access to your master key they won't be able to see this data.

If you have more questions, let me know.

Best!

[thwl]

Thanks for the sharing this info :)

[Dmitriy Kazimirov]

hi,

So if this means I have opensource client app on github, and I'm ok with others using same server database as my own instance of app isues, it's ok to use them as public API?

What about Cloud Code? Will it also become public automatically? How to handle things like mailgun api keys in this case? Should I just set them via env variables?

[Davi Macêdo]

Hi, Dmitry. That's the idea. We are still improving the concept and features but want developers creating APIs in a collaborative way. Cloud functions at this time are not listed in the hub. Best!

[sogap...@gmail.com]

Help Davi.

Firstly of all, we really appreciate your backend-end and Service - Major Blessing. We Hope to start paying in the future for the plan.

With regards to the Open API, would other developers have access to "Write and Read" our Class-Data or just "Read and Copy(Fork)" them? 

And what's CLP "You can secure your data using CLP"?

Thanks 

[Davi Macêdo]

Hi,

Depends on the configuration you set in CLP, they can just read, read/write, or not even read.

You can setup CLP through the dashboard. Click in your class then the button "security" in the top right corner.

Best!