Security • EP.Retail.PoBox.BackEnd.API EndPoints
Authenticate EP.Retail.PoBox.BackEnd.API EndPoints requests
Use the authentication model defined in your OpenAPI file, then send credentials with protected API requests.
Security Requirement
Always store client secrets in secure environment variables or key vaults. Never commit credentials to version control.
Authorization Header Format
Include the access token in the standard HTTP Authorization header for all protected requests.
Authorization: Bearer YOUR_API_TOKENSecurity Best Practices
Trusted Systems
Call this API from trusted backend systems only. Do not expose credentials or access tokens in client-side browser bundles.
Operational Support
Log request correlation IDs and timestamps for troubleshooting, keeping authorization headers out of plain-text logs.