Nucleus .Net Core CMS
  1. Site Management
    1. Getting Started
    2. Configuration Files
    3. Site Settings
    4. Task Scheduler
    5. System Administrators
    6. Roles
    7. Users
    8. Lists
    9. Install Extensions
    10. System Status
    11. Mail Templates
    12. Search Settings
    13. Api Keys
  2. Content Management
    1. Files and Folders
    2. Managing Pages
    3. Editing Content
  3. Modules
    1. Content
      1. Text/Html
      2. Static Content
      3. Documents
      4. Links
      5. Multi-Content
      6. Media
    2. Utility
      1. Error Report
      2. Search
      3. Site Map
      4. Accept Terms
    3. Applications
      1. Forums
      2. Publish
  4. Other Extensions
    1. Elastic Search
    2. Azure Blob Storage
    3. Google Analytics
    4. Amazon S3
    5. OAuth Client
  5. Reference Documents
    1. Configuration Reference
    2. Release Notes - Version 1.x
  6. Hosting
    1. Azure App Service
    2. Linux

Api Keys

To manage Api Keys, click "Settings", then choose "Api Keys".

Api Keys

Api Keys are used to manage access keys and shared secrets used to authenticate inbound requests when applications (rather than users) access Nucleus endpoints. The search feeder uses an Api Key to authenticate when retrieving page content for the search index, and other Nucleus extensions can use Api Keys to authenticate applications which use their functionality.

Properties
ID The Api Key ID is the "access key"
Name The name for the Api Key, used for your reference only.
Notes Your notes for the Api Key. You can add information on who the key was assigned to, it's intended use and any other information that you require. Notes are displayed in the Api Key editor only.
Secret The secret is an auto-generated string, which is shared with the user of an Api Key, and is used to create an Authentication token.
Scope One of more scopes, separated by line feeds. Scopes specify the access rights for the Api Key. Extensions can implement their own scope checking, and Nucleus automatically recognizes scopes in the form role:role-name.
Enabled Specifies whether the Api Key is enabled.

Making a request using an Api Key

Applications which make Http requests to Nucleus must specify an Authorization header, with a "scheme" of Nucleus-HMAC256 and a value which is generated using values from the request and the shared secret. The Nucleus.Extensions.HttpRequestExtensions class contains a .Sign method which will add the header to a Http Request object. Applications which do not want to reference the Nucleus.Extensions assembly can copy the source code into their project.

Privacy Policy