Authentication

Sign In

Enbbox supports secure authentication. Sign in to access the dashboard and manage your notification infrastructure.

API Authentication

All API requests require authentication using an API key:

curl -H "Authorization: Bearer YOUR_API_KEY" \
     https://api.enbbox.com/v1/events/trigger

API Keys

Creating API Keys

1. Navigate to Settings → API Keys in your project
2. Click Create API Key
3. Give it a descriptive name
4. Copy the key immediately (it won't be shown again)

Key Scopes

API keys are scoped to a specific project. Each project has its own API key that authenticates requests to that project's resources.

Key Security

• Store API keys in environment variables, never in source code
• Rotate keys periodically
• Revoke keys if compromised
• Use separate keys for different services

HMAC Subscriber Authentication

For client-side SDK usage, authenticate subscribers using HMAC:

const hash = createHmac("sha256", ENBBOX_API_KEY)
  .update(subscriberId)
  .digest("hex");

Pass the hash when initializing the client SDK to prevent subscriber impersonation.