| Excerpt |
|---|
When you create an API key, by default, a wildcard asterisk (*) is set for all the new API keyskey. This allows your key to be used on any domain. Using the (*) is recommended for development only and should be removed and replaced with specific whitelisted domains for use in public, production environments. |
Your AerialSphere API can be restricted to be only used for the specific domains that you want. These are the whitelisted domains or URLs. You can add whitelisted domains to your API key from the API keys page using the following steps:
Click on the settings icon next to your key
Edit the wildcard asterisk (*) to add your own domain to this and click Save Changes
You can add multiple domains to this. For example
| Code Block |
|---|
*web.domain.org/* *.domain.org/* https://domain.org/* |
...
This whitelisting is specific to only the domain itself, not a full path. Wildcards (*) can be used for protocols and ports.
Correct: https://sample.com
Incorrect: https://sample.com/page/* or https://sample.com/*
Examples:
Specific hostname: sample.com
Specific protocol and hostname: https://sample.com
Any subdomain: *.sample.com
URL with non-standard port: sample.com:8000
URL with any non-standard port: sample.com:*
Any protocol, subdomain, and non-standard port: *://*.sample.com:*