1. Setup & Configuration

• Install the component and access the Backoffice screen.
• Generate your RSA Key Pair (Private/Public keys) within the management console.
• Create a new Service Account for your O11 application. Copy the generated Client ID and Client Secret.

2. Securing your APIs

• In your exposed REST API's OnAuthentication flow, reference the ValidateToken Service Action.
• Pass the authorization header from the request.

If ValidateToken.IsValid returns False, raises a 401 Exception to block unauthorized access.

For more information about securing exposed REST APIs with JWT token-based authentication, refer to Token-based authentication for exposed REST APIs.