Authentifizierung

Rendra verwendet API-Schlüssel zur Authentifizierung. Jede Anfrage an einen geschützten Endpunkt muss ein gültiges Bearer-Token enthalten.

Einen API-Schlüssel erhalten

API keys are created when you register an account. Send a POST request to /api/v1/users with your email address:

curl -X POST https://rendra.alphabros.eu/api/v1/users \
  -H "Content-Type: application/json" \
  -d '{"email": "you@example.com"}'

Response:

{
  "id": "usr_abc123",
  "email": "you@example.com",
  "api_key": "rnd_live_xxxxxxxxxxxxxxxxxxxx",
  "plan": "free"
}

Ihren API-Schlüssel verwenden

Pass your API key as a Bearer token in the Authorization header on every request:

Authorization: Bearer YOUR_API_KEY

Example — curl

curl -X POST https://rendra.alphabros.eu/api/v1/generate \
  -H "Authorization: Bearer rnd_live_xxxxxxxxxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{"prompt": "A clean product launch banner", "width": 1200, "height": 630}'

Example — JavaScript (fetch)

const response = await fetch('https://rendra.alphabros.eu/api/v1/generate', {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${process.env.RENDRA_API_KEY}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    prompt: 'A clean product launch banner',
    width: 1200,
    height: 630,
  }),
});

Authentifizierungsfehler

Status	Code	Description
401	Unauthorized	Missing or malformed Authorization header.
403	Forbidden	API key is invalid or has been revoked.
429	Too Many Requests	You have exceeded your plan's rate limit. See Abrechnung und Nutzung.

Bewährte Sicherheitspraktiken