Supportgroepen

Clients & API

OAuth, tokens, scopes, API-toegang en clientinstellingen.

What headers does the XWMS API require?

Most secured API endpoints require X-Client-Id, X-Client-Secret, and X-Client-Domain headers. These identify the client, authenticate the secret, and let XWMS verify that the request is coming from an allowed domain configuration.

api headers client-credentials

How does client credentials security work in XWMS?

XWMS resolves the client and domain from the request headers, verifies that the client secret is active, checks that the domain is allowed, and enforces domain settings such as active status, authentication access, API access, server IP allowlists, and test or live mode rules.

api client-credentials security

Live support