什么是API密钥？ [英] What is an API key?
问题描述
我能看到这个词在几乎每一个跨业务应用，这些天。
到底是什么一个API密钥，什么是它的用途
还请解释公共和私有API密钥之间的区别。
I get to see this word in almost every cross service application these days.
What exactly is an API key and what are its uses
Also please explain the difference between public and private API keys.
推荐答案
什么正是API密钥用于取决于谁发出它，什么样的服务它被用于非常多。总的来说，然而，API密钥是给予某种形式的秘密令牌这是一起网络服务（或类似）的请求，以确定该请求的来源提交的名称。钥匙可以包括在所述请求的内容的一些消化进一步验证的起源和至prevent与值的篡改。
What "exactly" an API key is used for depends very much on who issues it, and what services it's being used for. By and large, however, an API key is the name given to some form of secret token which is submitted alongside web service (or similar) requests in order to identify the origin of the request. The key may be included in some digest of the request content to further verify the origin and to prevent tampering with the values.
通常，如果可以肯定地识别一个请求的来源，它作为认证的一种形式，其可以导致访问控制。例如，您可以限制访问基于谁的执行请求某些API操作。对于公司，赚钱出售这样的服务，这也是跟踪的方法谁在使用的东西，以便进行计费。再者，通过阻断一个键，就可以部分地prevent滥用过高的要求量的情况。
Typically, if you can identify the source of a request positively, it acts as a form of authentication, which can lead to access control. For example, you can restrict access to certain API actions based on who's performing the request. For companies which make money from selling such services, it's also a way of tracking who's using the thing for billing purposes. Further still, by blocking a key, you can partially prevent abuse in the case of too-high request volumes.
在一般情况下，如果有两个公共和私有API键，则它表明钥匙本身在某种形式的非对称加密或者相关的数字签名。这些更安全技术正识别请求的来源，另外，为保护请求的内容从窥探（除了窜改）。
In general, if you have both a public and a private API key, then it suggests that the keys are themselves a traditional public/private key pair used in some form of asymmetric cryptography, or related, digital signing. These are more secure techniques for positively identifying the source of a request, and additionally, for protecting the request's content from snooping (in addition to tampering).
这篇关于什么是API密钥？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
