Our products expose and use APIs: the license check that talks to our server, payment gateway callbacks, the reseller catalogue feed. A well-built API authenticates every request, signs or encrypts sensitive data, limits how often it can be called and returns clear error codes.
If you integrate with one of our APIs, keep keys on the server side, never in JavaScript, and log failed calls so you can see when something changes.
0 comments