Read the thread?
> I think every API key system should have endpoint "invalidate_api_key"
Not this.
> I think every API key system should have endpoint "invalidate_api_key"
Not this.
What is your alternative idea?
No idea why you’re being so hostile here.
The status quo is clearly the local minima, given the myriad of trade offs and different parties involved.