security - 我使用哪个 API_KEY 来创建新的 TrueVault 用户？

Question

我想使用用户 API 在 TrueVault 中创建新用户，但它需要一个带有编码 API KEY 的授权标头。我不确定为此目的使用哪个 API 密钥以及从哪里获取它？另外，这是否应该硬编码到我正在创建的移动应用程序中？

谢谢

Answer 1

You can create an initial full access User using the console. https://console.truevault.com -> Users -> Create New User. Upon creation, clicking into the User should show the API Key. This User will have full CRUDA privileges on all resources, so it's unsafe to use this User's API Key for an application.

In order to create a User with limited privileges, you should not create a User through the console. You can use the API Key of one of the Users created in the console to create another User using our Users API. Check out https://docs.truevault.com/Users.html to see how to do so.

We recommend using environment variables to represent API Keys or any other sensitive data in your application.