Authorization
Two authorization methods are available: API keys and HTTP Bearer tokens.
API Keys
API Key authorization is the mechanism to be used by external applications. API keys will typically be long-lived, as such they should be kept secret and treated like any other password.
Authorization is performed by providing the API key in an X-API-Key
header.
HTTP Bearer tokens
HTTP Bearer token authorization is the mechanism to be used for other types of clients. Depending on the token scope, these tokens may provide access to all endpoints.
Bearer tokens must be obtained and refreshed through our identity provider.
Authorization is performed by providing the bearer token in an Authorization header, for example: Authorization: Bearer <token>
.
Updated 7 months ago