HM: API security

• Type: Epic
• Status: Closed
• Priority: Minor
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: None
• Component/s: Headless Delivery API
• Labels:
  • Consider_For_7.3
• Epic/Theme:
  • Headless_Management
• Epic Status: Done

API management:

The portal should provide the needed capabilities in order to have control over what/how is exposed through the API.

What this means:

• creation/deletion of consumer applications credentials

• • Permission management for API keys:
    • Which resources can I see? by type, by element
      • website, contentSpace scope
    • Which operations: read, create, modify, delete, custom actions.
• Service quotas: assign quotas, restrictions performed, etc
• stop/start exposing the API