How to use a Secret API Key?

[diegonc]

I created a secret api key in the following section:

Now how do I use it to make requests? Like listing products?

[jkuzmanovik]

In MedusaJS, the secret API key is used when you need to perform actions as an authenticated admin user directly from the frontend.

If your goal is to display products in your webshop (storefront), you should use a publishable API key instead. This ensures secure access while exposing only the necessary public data.

[diegonc]

Hmm, I would use the secret key from another backend service. Putting it in the frontend is not a good idea (everyone can see and use it).

[diegonc]

I just found it's decribed here

An Authorization: Basic {token} header must be added to the request.

It's kinda a twisted way of using basic authentication...