Help Center> API Gateway> Developer Guide> Authentication Mode Selection
View PDF

Authentication Mode Selection

API Providers

The following authentication methods are available for calling APIs:

  • App authentication (recommended)

    API callers will be authenticated using the AppKey and AppSecret issued by API Gateway.

    1. APIs with App authentication can be released on the marketplace.
    2. App authentication is oriented to the tenants of API Gateway.
  • IAM authentication
    Token and AK/SK authentication is supported.
    • Token authentication: Requests are authenticated using a token. This authentication mode is recommended because it requires no SDK signatures.
    • AK/SK authentication: Requests are signed using an AK and SK in the same way as in App authentication mode.

    APIs called through IAM authentication cannot be released to the marketplace. IAM authentication is oriented to the tenants of API Gateway.

  • Custom authentication

    You can compile a function in FunctionGraph and use it for authentication. For details about API calling, see Creating a Function for Frontend Custom Authentication.

  • None

    APIs with None authentication require no authentication of users accessing these APIs.

    1. APIs with None authentication cannot be released on the marketplace.
    2. It is intended for all public network users.

API Callers

  1. If you obtain an API from the marketplace, get the API usage guide to confirm the authentication mode, and then call the API according to the instructions in this document.
  2. If you obtain an API from an offline channel, contact the API provider to confirm the authentication mode, and then call the API according to the instructions in this document.