Security • WAYN API
Authenticate WAYN API requests
Use OAuth 2.0 Client Credentials to obtain a short-lived access token, then send that token with protected Verify, Reach, and Notify requests.
Security Requirement
Always store client secrets in secure environment variables or key vaults. Never commit credentials to version control.
Authorization Header Format
Include the access token in the standard HTTP Authorization header for all protected requests.
Authorization: Bearer YOUR_WAYN_ACCESS_TOKENSecurity Best Practices
Partner systems
Call WAYN from trusted backend systems only. Do not expose partner credentials or access tokens in browser bundles.
Operational support
Log correlation IDs and timestamps for troubleshooting, but keep authorization headers and customer data out of plain-text logs.