Legacy v2023-11-15 guide to authenticating Fintoc API requests with secret keys, including header format and rules for handling those keys safely.
Authenticated request
curl --request GET https://api.fintoc.com/v1/links \--header "Authorization: sk_test_9c8d8CeyBTx1VcJzuDgpm4H-bywJCeSx"
Fintoc uses API Keys to authenticate requests. The API Keys used to make requests to the API are called Secret Keys and have broad privileges, so keep them safe. Don’t share your Secret Keys in public places like GitHub repos or code that’s running on the client side.The API expects every request to be authenticated with a Secret Key through the Authorization header:
Authentication
Authorization: YOUR_SECRET_KEY
ImportantEvery request to the API needs to be through HTTPS. Requests through plain HTTP will fail. Unauthenticated requests will also fail.