hi, As I understand it correctly on Service Desk API for Developers | Freshservice freshworks provides an API which uses some sort of API key. But after testing it in Postman I see that the API is only using Basic Authentication as a security. This means if someone knows our URL he can then itera…

@karthick.babu can you please help here? Thanks!

This would be very important for us as well. Is there a public roadmap which customers can view? This API security is kind of a big deal. Best regards,

Hi @Matthias , Thanks for reaching out to our community. Yes, As you mentioned we support Basic Authentication for our APIs. However, we use a strong API key generation mechanism that cannot be guessed by an attacker. Also in the case of an API key, we do not expect a password to be filled, Simple…

Thanks for your answer. The strong API key as you mentioned is hard to guess but not impossible. Also it consists only from a single factor. OAuth 2.0 would be the next logical solution for this. Also there are for example 50 agents in our company. Each of them can have a API key generated. The…

@Matthias I have to agree that the maintaining of API Keys should be available to those who use those keys. The issue of agent name appearing where the key is used made us have to pay for an additional agent license and name it “Help Desk” so that when it was invoked in workflow to add notes (for ex…

[image] Deprecation of basic authentication (username/password-based) for Freshservice API v2 Announcements Deprecation of password-based authentication for API v2 The demand for following safe code practices and standardised API usage is increasing. We underst…

When will a secure API Authentication be implemented?

Product

Thakur_Ganeshsingh (Thakur Ganeshsingh Thakur) November 25, 2022, 9:51am 7