Get this: the ipfs API doesn't even need credentials. You can just POST to it over localhost because it runs on a private port. You can literally install ipfs as a dependency and it "just works" with zero configuration for media uploads.