Updated on 2023-05-09 GMT+08:00

Authentication Mode Selection

API Providers

The following authentication methods are available for calling APIs:

  • App authentication (recommended)

    API callers will be authenticated using the AppKey and AppSecret issued by APIG.

    1. This authentication mode is provided for APIG tenants.
  • IAM authentication
    Token and AK/SK authentication is supported.
    • Token authentication: Requests are authenticated using a token. This authentication mode is recommended because it requires no SDK signatures.
    • AK/SK authentication: Requests are signed using an AK and SK in the same way as in app authentication mode.

    This authentication mode is provided for APIG tenants.

  • Custom authentication

    You can compile a function in FunctionGraph and use it for authentication. For details about API calling, see Creating a Function for Frontend Custom Authentication.

  • None

    APIs with None authentication require no authentication of users accessing these APIs.

    1. It is intended for all public network users.

API Callers

  1. If you obtain an API from an offline channel, contact the API provider to confirm the authentication mode, and then call the API according to the instructions in this document.