API Keys

API keys are essential for accessing our services. In our system, there are two types of API keys:

1. Tenant Keys: Designed for managing tenant-level operations.
2. Customer Keys: Specifically tailored for customer-related activities.

Each API key consists of two components: Client ID and Client Secret.
Both parts are required to generate an access token for the API. Treat these credentials with the utmost care to maintain the security of your application and data.

Tips for Safely Handling API Keys

1. Keep Secrets Confidential: Never expose the Client Secret in client-side code or public repositories.
2. Use Environment Variables: Store API keys in environment variables or secure configuration files rather than hardcoding them in your application.
3. Limit Permissions: Assign API keys the minimum level of access/roles required for their intended purpose.
4. Revoke Compromised Keys: If you suspect an API key has been exposed, revoke it immediately and generate a new one.