Help Center> API Gateway> User Guide> Shared Gateway (for Existing Users)> App Management> Creating an App and Obtaining Authorization
Updated on 2024-04-03 GMT+08:00

Creating an App and Obtaining Authorization

Scenario

For an API that uses app authentication, you can create an app and use the app and its ID and key pair (AppKey and AppSecret) to call the API. You can use an app to call an API only after you bind the app to the API. When you call the API, replace the key pair in the SDK with your own key pair so that APIG can authenticate your identity. For details about app authentication, see Developer Guide.
  • If the authentication mode of the target API has been set to None or IAM, you do not need to create apps to call this API.

Creating an App

  1. Access the shared gateway console.
  2. In the navigation pane, choose API Calling > Apps.
  3. Click Create App, and configure the app information.

    Table 1 App information

    Parameter

    Description

    Name

    App name.

    Description

    Description of the app.

  4. Click OK.

    After the app is created, its name and ID are displayed in the app list.

  5. Click the app name, and view the AppKey and AppSecret on the app details page.

    Figure 1 App details

Binding an App to an API

  1. Access the shared gateway console.
  2. In the navigation pane, choose API Calling > Apps.
  3. Bind an app to an API. You can use one of the following methods:

    • In the Operation column of the app, click Bind to API, and then click Select API.
    • Click the name of the target app, and click Select API.

  4. Select an environment, select an API, and click OK.

    After the binding is complete, you can view the API on the app details page.
    • Only APIs using app authentication can be bound with apps.
    • An app can be bound to multiple APIs that use app authentication, and each such API can be bound with multiple apps.
    • To debug an API to which the app is bound, click Debug in the row containing the API.

Follow-Up Operations

You can call APIs using different authentication methods. For details, see Calling APIs.