Endpoint Authentication

You can require authentication on an endpoint to limit who can call it. Configure one or more methods in the endpoint editor under Authentication.

Authentication is inbound

Endpoint authentication controls who can call your endpoint. To authenticate when your endpoint calls another system, use a Connection. The Key Concepts page compares the two.

If multiple methods are configured, all of them must pass before the endpoint runs (external callers). Calls authenticated via the AireGlu management API may satisfy authentication separately when invoking endpoints from the editor.

Available methods

Method	Summary
API Key	Shared secret passed in the X-Api-Key header
Internal Only	Restricted to localhost or internal network calls
Basic Auth	Username and password in the Authorization header
IP Address / Range	Restrict callers to defined IP addresses or CIDR blocks
Client Credentials	Server to server Bearer tokens validated against AireIdentity
Open ID Connect Bearer Token	User access Bearer tokens validated against a configured identity provider

Open ID Connect Bearer Token authentication can also check the user's permissions before the endpoint runs. See Permission Gating.