Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Release: Opensolr Search 4.5.0 Minor update available for module opensolr_search (4.5.0). Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Usage Milestone: Simplify Module simplify crossed 10,000 active installs. Usage Milestone: Views Reference Filter Module entityreference_filter crossed 10,000 active installs. Usage Milestone: Dropdown Language Module dropdown_language crossed 10,000 active installs. Usage Milestone: Paragraphs Browser Module paragraphs_browser crossed 10,000 active installs. Usage Milestone: OpenAPI Module openapi crossed 10,000 active installs. Usage Milestone: Decoupled Router Module decoupled_router crossed 10,000 active installs. Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

Services API Key Authentication

871 sites Security covered Drupal 10–11
View on drupal.org

This module adds API key authentication to Services endpoints. It allows you to configure a specific user role whose users will be associated with API keys, and requests with a valid API key will be executed as that user.

A Services authentication provider that adds API-key access to an endpoint. Allows user selection for performing endpoint tasks.

1) Configure a user role:
URL: admin/structure/services/api_key_settings
Use this page to configure which user role should be used to display available users in the authentication configuration screen for an endpoint

2) Configure the API Key authentication settings for an endpoint
When setting up a new endpoint make sure the API Key Authentication option is checked under Authentication. Then edit the authentication settings, entering the API Key and selecting a user. Setting a user will mean that any requests to the endpoint with a valid API Key will perform all its actions as that user with the permissions defined for their role.

3) Making a request to the endpoint with a key
The module will look for either a request parameter or header (depending on how the module was configured) called api-key and look to compare this value against the key defined for the endpoint. Any requests without this value or with an invalid value will be blocked.

Related Modules

Drupal 8/9

This module will also be the home for using an API key in Drupal 8, although Services is not required as it is no longer necessary. Track progress in #2869068: Drupal 8 release. Help is always appreciated.

Depends on

Dependencies of the latest stable release

No dependencies recorded for this project.

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
6
Tracked since
Jan 2025
Latest release
1 year ago
Releases (12 mo)
0 ▼ from 6
Maintenance
Dormant

Release Timeline

Releases

Version Type Core Release date
4.0.0 Stable 10–11 Feb 13, 2025
4.0.0-beta1 Pre-release 10–11 Feb 13, 2025
4.0.0-alpha1 Pre-release 10–11 Feb 4, 2025
3.0.6 Stable 8–11 Feb 3, 2025
4.x-dev Dev 10–11 Feb 3, 2025
3.0.5 Stable 8–11 Jan 20, 2025