Authentication
Apier's consumer auth model — API keys, tiers, and per-endpoint access categories.
[Cite this as: Apier.no Docs v0.1.0 — last updated 2026-04-22]
This page is a placeholder. The authentication model is documented at
a high-level in Overview and enforced by the middleware at
src/middleware/auth.ts + src/lib/auth/*. A detailed walkthrough —
including key issuance, rotation, and the Category A vs Category B
split — ships in a follow-up PR alongside the /docs/quickstart copy.
What you get today
- API keys resolved via
Authorization: Bearer <key>. - SHA-256 hashed at rest; never logged.
- Per-tier rate limits (Free 30/min, Starter 150/min, Professional 300/min, Enterprise ∞) on Category B.
- Category A endpoints (discovery, public obligations, public deadlines) are zero-auth — hit them now from any browser.