![]() ![]() A subscription scoped to a product that's assigned to the API.When API Management receives an API request from a client with a subscription key, it handles the request according to these rules:Ĭheck if it's a valid key associated with an active subscription, either: How API Management handles requests with or without subscription keys API request with a subscription key Disable requirement for API - In the Settings page of the API, disable Subscription required.Īfter the subscription requirement is disabled, the selected API or APIs can be accessed without a subscription key.Disable requirement for product - On the Settings page of the product, disable Requires subscription.To disable the subscription requirement using the portal: You can disable the subscription requirement at the time you create an API or product, or at a later date. This configuration may be overly permissive and may make an API more vulnerable to certain API security threats. Use care when configuring a product or an API that doesn't require a subscription. The query parameter is checked only if the header isn't present. Include the subscription-key query parameter and a valid value in the URL. Use a subscription keyĪ subscriber can use an API Management subscription key in one of two ways:Īdd the Ocp-Apim-Subscription-Key HTTP header to the request, passing the value of a valid subscription key. You can change the state of the subscription as needed - for example, you can suspend, cancel, or delete the subscription to prevent API access. When created in the portal, a subscription is in the Active state, meaning a subscriber can call an associated API using a valid subscription key. Use a custom system to make the subscription key available to your team.Ĭreate and manage subscriptions in Azure portalĪPI publishers can create subscriptions directly in the Azure portal.To grant developers and the rest of your team access to the standalone subscription key, either: This feature proves useful in scenarios similar to several developers or teams sharing a subscription.Ĭreating a subscription without assigning an owner makes it a standalone subscription. Standalone subscriptionsĪPI Management also allows standalone subscriptions, which aren't associated with a developer account. If you're using an API-scoped subscription or the all-access subscription, any policies configured at the product scope aren't applied to requests from that subscription. This built-in subscription makes it straightforward to test and debug APIs within the test console. All-access subscriptionĮach API Management instance comes with an immutable, all-APIs subscription (also called an all-access subscription). ![]() ![]() In these cases, you don't need to create a product and add APIs to it first.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |