Can we decode API key / how to make sure that the API key is secure?

Questions API
1

I am building user management activation flow in Java using existing okta api for example “{{url}}/api/v1/users?activate=true”
This API takes APIKEY, can we verify the apikey before granting the user to perform the action?

2

The API token is opaque. Accessing a resource is the easiest way to validate the key.

https://developer.okta.com/docs/api/getting_started/getting_a_token

Are you looking for something more specific?

3

This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.