Authorization
API keys are essential for securing APIs. By requiring a valid key, the API provider prevents unauthorized access and protects their infrastructure from attacks in this new API. Onoff recommends entering an API key during the configuration step to help protect your application and authenticate the data source.
The API key provides an initial layer of security. If an API key is entered, all logs will be sent with the following HTTP Header.
Authorization: x-api-key <token>
It is up to the organization to implement a validation procedure with this header in each request
Security note
If your organization has a firewall in place, please ensure the following IP address is added to your whitelist to prevent access rejection:
46.137.171.21
52.50.239.4
54.220.111.56