Profound API Authentication
The default configuration is such that any caller can run your APIs.
Overview
There are four parts to controlling who can call your APIs. Each part is covered in detail on its own page, linked below.
Configure which types of Authentication to enable (see OpenAPI Configuration).
Authentication is a way to prove the caller is who they say they are, such as user/password.
Configure which type of Authorization to enable (see Security Store Configuration).
Authorization is a way to further refine which authenticated callers are allowed or denied for specific APIs.
Configure API Users (see API Users).
Configure security permissions on each API (see Permissions).
Custom Authentication
If you need to handle other means of authentication than the supported options, you can set up a Custom Authentication module (see customAuthentication to do this).
Using this Custom Authentication option can be done instead of Items 1, 2, and 3 above.
This Custom Authentication can integrate into Item 4 above, or can override it.