Is the Basic Authorization header the only security on the Management APIs? We are aiming to script some of the API functionality (for creating developer apps, users) on our developer portal for some specific needs. Considering that encoding the Apigee username/password is all that is required to create the header and call these APIs, we are considering adding a convenience proxy layer to these to enhance the security. Are we on the right track or is there a better path for tightening security on these? Thank you!
LinkedIn
Twitter
