Hi all, Wesley from Flusk here :waving_hand:t3: Today I’d like to share with you some insights, tips and tricks about Bubble API Tokens, that can be way more dangerous than what people use to think. Here’s a quick summary of what we’ll cover in this lesson: API Tokens - Generic Description and u…

[Screenshot 2024-09-10 073233] I don’t understand this, if you haven’t enabled the Data API, does it mean that admin authentication doesn’t allow access to anything?

It allows authentication to your public backend workflows with no privacy rule constraints.

Assume I have an app with zero public backend workflows and the Data API unchecked, what then?

Unrelated to the API key but make sure you have solid privacy rules and then those are the big three security items checked off. If your Data API is disabled and have no public BEWF, then the API key won’t be of any use. And make sure your app’s editor isn’t public :wink:

Security: How to manage API Tokens on Bubble

Tips

randomanon September 11, 2024, 1:19pm 6

That’s actually kind of a relief because it would let me upload private files to 3rd party APIs.

Sept 6: Biweekly Community Poll

Topic		Replies	Views
Set up own API for end users APIs	24	4551	July 22, 2024
Bubble API to authenticate a user APIs	2	305	July 15, 2024
Bubbles own api tokens, privacy rules query APIs	0	635	September 5, 2017
How to create static/permanent API tokens for users? APIs	16	1107	May 24, 2025
User Credentials vs API Tokens: Choosing the Right Authentication Method for API Requests APIs	8	251	July 29, 2024

Security: How to manage API Tokens on Bubble

Related topics