Does the latest still need X-API-Key header? #49
|
On login screen it's necessary to input API Key and |
Answered by
james-stevens
Sep 17, 2021
Replies: 2 comments
|
Right. Its better to use an HTTP proxy with per-user authentication and put the API Key in the HTTP server's config - giving out shared keys to users is generally a bad idea. If you are using an HTTP proxy, then you do not need to provide the API Key at login. However, some people prefer to keep their set up very simple and talk directly to PowerDNS API (no HTTP Proxy). If they wish to do this, then they need to b able to provide the API Key when attaching. |
0 replies
Answer selected by
james-stevens
|
Ah, I see. Thanks! :) |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Right.
Its better to use an HTTP proxy with per-user authentication and put the API Key in the HTTP server's config - giving out shared keys to users is generally a bad idea. If you are using an HTTP proxy, then you do not need to provide the API Key at login.
However, some people prefer to keep their set up very simple and talk directly to PowerDNS API (no HTTP Proxy). If they wish to do this, then they need to b able to provide the API Key when attaching.