From fd29ee56c4678749c00e7698ef245f7e2967ee10 Mon Sep 17 00:00:00 2001 From: Simon Green Date: Sun, 27 Jul 2014 18:47:21 +1000 Subject: Bug 726696 - All authenticated WebServices methods should require username/pass, token or a valid API key for authentication r=dkl, a=sgreen --- docs/en/rst/using.rst | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) (limited to 'docs/en/rst') diff --git a/docs/en/rst/using.rst b/docs/en/rst/using.rst index 5be1a2582..a98ff7680 100644 --- a/docs/en/rst/using.rst +++ b/docs/en/rst/using.rst @@ -1005,6 +1005,22 @@ If you attempt to change your email address, a confirmation email is sent to both the old and new addresses, with a link to use to confirm the change. This helps to prevent account hijacking. +.. _apikey: + +API Keys +======== + +API keys are used to authenticate REST calls. You can create more than one +API key if required. Each API key has an optional description which can help +you record what each key is used for. + +On this page, you can unrevoke, revoke and change the description of existing +API keys for your login. A revoked key means that it cannot be used. The +description for purely for your information, and is optional. + +You can also create a new API key by selecting the check box under the 'New +API key' section of the page. + .. _permissionsettings: Permissions -- cgit v1.2.3-24-g4f1b