Authentication
Learn how BSOS API requests are authenticated.
1
Use an API Key
Every request must include a valid BSOS API Key.
2
Send the Authorization header
Pass the API Key using the Authorization header with the Bearer format.
3
Keep keys server-side
Never expose BSOS API Keys in browser code, mobile apps or public repositories.
4
Handle unauthorized requests
Invalid, expired or disabled keys return an authentication error.
Next step
Continue with API Keys to understand how keys are created, rotated and disabled.
Continue to API Keys →