Files
medusa-store/www/apps/docs/content/development/publishable-api-keys/index.mdx
Shahed Nasser c28935b4e8 docs: update endpoints to use file-routing approach (#5397)
- Move the original guides for creating endpoints and middlewares to sub-sections in the Endpoints category.
- Replace existing guides for endpoints and middlewares with the new approach.
- Update all endpoints-related snippets across docs to use this new approach.
2023-10-19 15:56:26 +00:00

69 lines
2.6 KiB
Plaintext
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
---
description: 'Learn what publishable API keys are and how they can be used in the Medusa backend. Publishable API keys can be used to scope API calls with an API key.'
---
import DocCardList from '@theme/DocCardList';
import Icons from '@theme/Icon';
# Publishable API Keys
In this document, youll learn about Publishable API Keys and their architecture.
## Introduction
While using Medusas APIs, you might have to pass some query parameters for certain resources with every or most requests.
Taking Sales Channels as an example, you have to pass the Sales Channels ID as a query parameter to all the necessary API Routes, such as the List Products API Route.
This is a tedious and error-prone process. This is where Publishable API Keys are useful.
Publishable API Keys can be used to scope API calls with an API key, determining what resources are retrieved when querying the API. Currently, they can be associated only with Sales Channels.
For example, you can associate an API key with a B2B channel, then, on the storefront, retrieve only products available in that channel using the API key.
---
## PublishableApiKey Entity Overview
The `PublishableApiKey` entity represents a publishable API key that is stored in the database. Some of its important attributes include:
- `id`: The ID of the publishable API key. This is the API key youll use in your API requests.
- `created_by`: The ID of the user that created this API key.
- `revoked_by`: The ID of the user that revoked this API key. A revoked publishable API key cannot be used in requests.
---
## Relation to Other Entities
### Sales Channels
A publishable API key can be associated with more than one sales channel, and a sales channel can be associated with more than one publishable API key.
The relation is represented by the entity `PublishableApiKeySalesChannel`.
---
## Custom Development
Developers can manage Publishable API Keys and use them when making requests to the Store APIs.
<DocCardList colSize={6} items={[
{
type: 'link',
href: '/development/publishable-api-keys/admin/manage-publishable-api-keys',
label: 'Admin: Manage Publishable API Keys',
customProps: {
icon: Icons['academic-cap-solid'],
description: 'Learn how to manage publishable API keys using Admin APIs.'
}
},
{
type: 'link',
href: '/development/publishable-api-keys/storefront/use-in-requests',
label: 'Storefront: Use in Requests',
customProps: {
icon: Icons['academic-cap-solid'],
description: 'Learn how to use publishable API keys in a storefront.'
}
},
]} />