Skip to main content

Authorization

API keys are essential for securing APIs. By requiring a valid key, the API provider prevents unauthorized access and protects their infrastructure from attacks in this new API. Onoff recommends entering an API key during the configuration step to help protect your application and authenticate the data source.

The API key provides an initial layer of security. If an API key is entered, all logs will be sent with the following HTTP Header.


Authorization: x-api-key <token>


It is up to the organization to implement a validation procedure with this header in each request


Security note

If your organization has a firewall in place, please ensure the following IP address is added to your whitelist to prevent access rejection:

46.137.171.21

52.50.239.4

54.220.111.56