EDIWHEEL DESADV

API Key + Basic Auth

API key authentication is the simplest form of app-based security that can be configured for an API. A client app presents an API key in the request header, API manager checks to see that the API key is in an approved state for the requested resource . Internally, your proxies use policies to verify API key authenticity.

• When a consumer registers an app for any API product in the Apigee developer portal, a client ID and client secret are created
• Client ID is treated as an API Key and used to authenticate the consumer for subsequent API calls.

Basic authentication is a simple authentication scheme built into the HTTP protocol. To use it, send your HTTP requests with an Authorization header that contains the word Basic followed by a space and a base64-encoded string username:password.

Example: Authorization: Basic ZGVtbzpwQDU1dzByZA==