API key
AppScan Standard supports API authentication for scanning APIs that require an API key.
If your API scan is based on a specification file, the key name and location are
populated automatically once the specification file is added using the API page:
- Select the Key name from the drop-down menu. The location is automatically populated based on the information in the specification file.
- Enter the Key value and click Apply. The API key value is saved and will be used during API authentication.
Note: If your specification file does not contain API key
details, the key name value might not be populated automatically. As a
workaround, you can add a custom header value that can function as an API key.
For more information on adding a custom header, see Custom Header tab.