API Testing · Junior · Question 45 of 75
How is API key authentication usually sent?
- 1In a header such as
X-API-Key - 2In the name of the HTTP method
- 3In the response body of the server
Show the answer
Correct answer: In a header such as X-API-Key
Explanation
Keys identify an application. They should go in headers over HTTPS, not in URLs, and be rotated if leaked.