Authentication

ETBX supports two authentication methods: API keys for programmatic access and session cookies for dashboard access.

API Keys

Use API keys to authenticate requests from your backend:

Authorization: Bearer etbx_test_your_api_key_here

Get your API key from the Settings page after signup.

Session Cookies

For dashboard access, ETBX uses HTTP-only cookies:

Set-Cookie: partner_session=eyJpZCI6In...; HttpOnly; Secure; Max-Age=604800

Logging In

curl -X POST https://api.etbx.com/api/auth/partners/login \
  -H "Content-Type: application/json" \
  -d '{"email": "dev@example.com", "password": "your-password"}'

Security Best Practices

• Never expose your API key in client-side code
• Always use HTTPS for API requests
• Rotate your API key periodically
• Use environment variables to store secrets