Issue and test an API key
Verify a subscriber can call your live product.
Verify a subscriber can call your live product.
Use this recipe whenever you publish a new product, change a plan, or debug subscriber access.
curl https://<product-host>/v1/example \
-H "Authorization: Bearer <subscriber-api-key>"
The response should come from your upstream API. If the gateway wraps or changes the response, document that in product docs.
curl https://<product-host>/v1/example
This should fail before reaching the upstream.
After revoking the key:
curl https://<product-host>/v1/example \
-H "Authorization: Bearer <revoked-api-key>"
This should return a gateway authentication or authorization error.