Description
Allow merchants to generate secure API keys for server-to-server integrations.
Requirements
- Create
POST /apikeys endpoint.
- Logic:
- Generate 32-byte cryptographically random key.
- Prefix with
sp_live_.
- Store only the SHA256 hash of the key in the database (
key_hash).
- Response: Return the plaintext key only once to the merchant.
Description
Allow merchants to generate secure API keys for server-to-server integrations.
Requirements
POST /apikeysendpoint.sp_live_.key_hash).