AIChat24AIChat24

Platform Apps: security

SSRF, session JWT, revoke, secrets.

Download Postman collection (External API)

All methods (accounts, etc.) without key — add your key in collection variables.

  • card/webhook/embed — только HTTPS (localhost в dev)
  • Long-lived API key только на partner backend
  • iframe: launch ticket → /v1/session/exchange → Bearer JWT
  • Revoke bump tokenVersion + Redis kill tickets/refresh
  • Signing secret — envelope на Host, HMAC card/webhook

Обзор Platform Apps

Оцените статью — нам важна ваша обратная связь.

0 (0 оценок)