Answers.Body: <p>The REST API requires that you specify the site key and an API key.  Details can be found <a href="http://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-SettinguptousetheRESTAPI">here</a>.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-04-01T14:41:36.603Z
Answers.Text: ...beat me to it.
Answers.UserDisplayName: Jeremy Proffitt
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-04-01T14:30:45.383Z
Answers.LastActivityDate: 2015-04-01T14:30:45.383Z
Answers.UserDisplayName: Jon G - Megaphone Tech
Answers.Body: <p>Whether or not https is used would be dependent on the CMS, but this is certainly recommended. Other than making sure the Access AJAX Api permission is set up for a particular CMS user, you will also need to pass a user api key that is assigned to the CiviCRM contact record associated with that CMS user. </p>
  
  <p><strong>Details at:</strong> <a href="http://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-SettinguptousetheRESTAPI">http://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-SettinguptousetheRESTAPI</a></p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-04-01T14:40:50.677Z
Answers.LastActivityDate: 2015-04-01T14:40:50.677Z
Answers.UserDisplayName: Jeremy Proffitt
Body: <p>In order to access the API securely what do I need to do?</p>
  
  <p>Is it as simple as using <code>https</code> and letting my CMS manage session authentication?</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2015-12-13T11:26:45.573Z
Comments.Text: Have you implemented the RESTFul APIs calls using https ?
Comments.UserDisplayName: Jeff Salleh
Tags: <api><security><rest>
Title: How is the restful API secured?
ThreadText: # How is the restful API secured?
  
  (Asked by: username_0 on 2015-04-01)
  
  In order to access the API securely what do I need to do?
  
  Is it as simple as using `https` and letting my CMS manage session authentication?
  
  **Tags:** api, security, rest
  
  > **Comments:**
  > **username_1**: Have you implemented the RESTFul APIs calls using https ?  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_3 on 2015-04-01. Score: 8 | Accepted answer
  
  Whether or not https is used would be dependent on the CMS, but this is certainly recommended. Other than making sure the Access AJAX Api permission is set up for a particular CMS user, you will also need to pass a user api key that is assigned to the CiviCRM contact record associated with that CMS user.
  
  **Details at:** <http://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-SettinguptousetheRESTAPI>
  
  
  ---
  
  ### Answer by username_2 on 2015-04-01. Score: 8
  
  The REST API requires that you specify the site key and an API key. Details can be found [here](http://wiki.civicrm.org/confluence/display/CRMDOC/REST+interface#RESTinterface-SettinguptousetheRESTAPI).
  
  > **Comments:**
  > **username_3**: ...beat me to it.  
  
  ---
  
  