filestack.com

Sign in to the Filestack Developer Portal. Create or open an application there and copy its API key. The docs' Quick Start and File API examples use this key as key in API requests or as the path segment in CDN/processing URLs.

Sign in to the Filestack Developer Portal and open your application settings. Filestack generates a secret for each application; the Security Policies page says this secret is used to sign Base64URL JSON policies with HMAC-SHA256. Use your backend to generate short-lived policy and signature values from that secret; those signed values are then sent to Filestack APIs. The File API also documents using the app secret directly as HTTP Basic password with username app for certain file operations.

Sign in to the Filestack Developer Portal and create or open an application used with the Management API. The Management API authenticates POST /auth with HTTP Basic auth using <client_id>:<secret_key>, then returns a JWT for subsequent requests.

First obtain a Management API JWT by calling POST /auth at Management API with your Management API client_id and secret_key via HTTP Basic auth. The returned token is valid for 60 minutes and is then sent as Authorization: Bearer <token> on Management API requests.