Back to Changelog
NewAPI
External API v1 dual-authentication added
externalApiV1 now accepts both X-API-Key and OAuth 2.0 Bearer tokens.
apiauthoauth
External API v1 Dual Authentication
- Path A: X-API-Key header → api_clients table
- Path B: Authorization: Bearer → oauth_tokens → oauth_grants
- Base44 platform JWT guard (eyJ... tokens rejected)
- Scope enforcement via ACTION_SCOPE map
- context enforcement (label_id / account_id)