API Security Configurable Authorization Token Extraction
3 months ago
By default, Panoptica's API Security capabilities monitor authentication and authorization behaviors by tracking security credentials (e.g. BasicAuth and JWT) stored in the standard "Authorization" request header. However, there are other valid locations for authorization tokens, such as cookies or custom request headers.
To support a broader range of API operations, Panoptica introduces the ability to define customized rules to specify the authentication and authorization tokens used within your application's APIs.
Detailed instructions and sample rules are available in the Authorization Extraction documentation