API Authentication
This guide explains how to authenticate your API requests to GLOCASHIER's payment platform.
API Keys
All API requests must be authenticated using API keys. There are two types of keys:
- Public Key: Used for client-side operations
- Secret Key: Used for server-side operations
Authentication Header
Include your API key in the Authorization header:
Authorization: Bearer YOUR_API_KEY
Best Practices
- Never expose your secret key
- Rotate keys regularly
- Use environment variables
- Implement key management