MAL API security updates

[Former user]

Post: https://myanimelist.net/forum/?topicid=1632480&show=0

How do these changes affect the Atarashii API? Will an Atarashii API server be blocked if multiple users fail to authenticate?

Thanks!

[dgw]

Working link: https://myanimelist.net/forum/?topicid=1632480&show=0 (OP has switched markdown syntax)

The app's Twitter account posted an announcement about this: https://twitter.com/AtarashiiApp/status/880828655252815873

I also get the impression that MAL support might not be maintained in the mid-to-long term, as they recommended switching to AniList (https://twitter.com/AtarashiiApp/status/880828863453855744). MAL has shown a history of repeatedly, unilaterally breaking third-party apps that interface with their service, on top of refusing to provide much in the way of official API access. Maintaining support for MAL must be a headache…

[Former user]

Thanks for the info. Think I am going to ditch MAL going forward because this seems ridiculous.

[Michael Johnson]

The API code itself should continue to work. It will, however, be subject to the awful ban system. This means that with enough users having a password issue, the API server would be banned for several hours.

I've put in place some mitigations on my server (the one serving the Atarashii! Android application) to try and avoid hitting the threshold, and it still doesn't completely eliminate bans.