Security

The API has a few options in terms of security:

• Unsecured & open for everybody
• Shared Access Key authentication

Shared Access Key authentication

Shared Access Key is turned off by default and can be turned on via the Authentication.EnableSharedAccessKey in the app.config.

Based on Authentication.SharedAccessKeyHeaderName it will interpret the HTTP header and verify that the key matches the ones in the key pool that are defined in the configuration via Authentication.KeyPool. Unfortunately, a access key repository is not supported at the moment.

You can add multiple keys to the key pool using the following format |PrimarySecret|SecondarySecret|.