{"id":"12","slug":"authentication","title":"API 鉴权方式","summary":"使用 Bearer Token，支持按空间签发与最小权限。","topic":"开发者 API","kind":"doc","language":"zh-CN","source":"manual","source_url":"","license":"","updated_at":"2026-11-07T12:42:42.175Z","word_count":254,"url":"https://knowledgehub.wujiss.com/a/authentication","sections":[{"heading":"获取 Token","text":"在控制台「开发者」页面创建密钥，密钥只显示一次，请妥善保存。"},{"heading":"请求示例","text":"curl https://api.example.com/v1/documents \\ -H "Authorization: Bearer $KB_TOKEN" \\ -H "Content-Type: application/json""},{"heading":"权限模型","text":"Token 可绑定到具体空间与操作（读、写、删），遵循最小权限原则。"},{"heading":"失效处理","text":"密钥泄露应立即吊销；吊销后 30 秒内全节点生效。"}],"text":"获取 Token 在控制台「开发者」页面创建密钥，密钥只显示一次，请妥善保存。 请求示例 curl https://api.example.com/v1/documents \\ -H "Authorization: Bearer $KB_TOKEN" \\ -H "Content-Type: application/json" 权限模型 Token 可绑定到具体空间与操作（读、写、删），遵循最小权限原则。 失效处理 密钥泄露应立即吊销；吊销后 30 秒内全节点生效。"}