uselotus / lotus

Open Source Pricing & Packaging Infrastructure
https://www.uselotus.io
MIT License
1.73k stars 126 forks source link

Improper documentation of API authentication #789

Open jtagcat opened 9 months ago

jtagcat commented 9 months ago

All the flashy curl boxes misdirect the consumer:

image

image


Would you think to use X-API-Key instead? curl --header 'X-API-Key: RhxUmsGG.7HYGRRnDTkJ7rPcQVbNHj8ls9Ysdt2tP' 'http://localhost/api/customers/'

It is documented when you scroll down on the first page. I had to try various variants, and at some point figured the application was broken.