Authentication

The management API is only intended for privileged administrative management of the app and not for external use.

You can authenticate with the management API with a management key.

The management key can be provided in the X-MgmtKey header, which allows you to authenticate with the API.

X-MgmtKey: {management_key}

Where to find this key?

If you are self-hosting Aufority, a management key will be generated in the app startup logs. The management key allows you to manage the entirety of the app, including the data of every team via the developer API and the management API.

Should you wish to set a persistent key, you can define API_MANAGEMENT_SECRET_KEY in the environment variables. Ensure the key you set is secure, as anyone with the key will be able to access the management endpoints.