Lesson 2 · plug APIs, Auth & Webhooks

API Keys & Scopes

Authenticate correctly and grant the least privilege needed.

Before you start

A Node Data key looks like nd_live_a1b2c3…. The first 12 characters are a public prefix used to look the key up; the rest is secret and only ever stored as a hash. That's why a lost key can't be recovered, only replaced — and it's the design you want.

5 exercises·up to 72 XP·5/5 hearts