Make all OpenCloud ratelimits token based for OAuth authorization

As a Roblox developer, it is currently too hard to reliabily develop applications using Roblox OAuth authorization for OpenCloud endpoints due to inconsistent ratelimits.

Currently some endpoints’ ratelimits are token based (for example V2 Get User) while others such as the V1 Get Asset’s are IP based hence making it difficult for an application to work at scale.

Meanwhile API keys enjoy a 60 requests/min ratelimit.

For example obtain 2 OAuth access tokens for 2 distinct users and send a request with both to the https://apis.roblox.com/assets/v1/assets/{ASSET_ID} endpoint, look at the response headers after sending each request: you will see that x-ratelimit-remaining header indicates the amount of requests remaining as shared between different tokens (IP based), 59 after the first request and 58 after the second.

If Roblox is able to address this issue, it would improve my development experience because it would allow an application with a considerable user base to rely on OpenCloud endpoints when using OAuth authorization.

I made the case of the assets API specifically but this should really be addressed for all existing and future endpoints.

1 Like