Archived from the Bravo community forum (2021–2026). Some answers may refer to older versions of Bravo.
👋 Xano-Bravo users!
I'm looking for a solution to make all APIs/db private in Xano similarly to the way Airtable works.
Has anyone found a way to create a static bearer token so it can be authenticated in Bravo request headers?
Thank you!
3 replies
Hi Leonor,
try having a look at this guide: https://docs.xano.com/api/the-basics/authenticated-request
Hope that helps :)
Thank you, Jonas!
True, the authentication with Xano is just different than Airtable; with Airtable we give one authentication in the Collection Settings for all requests, while with Xano, (by default) we authenticate each request that has user personalization in the “Test Values”.
I assume you can add authentication for other API’s that are not personalized for the user, but I struggle thinking why that would be needed.
Great to hear that it worked. There are actually a couple of reasons why you should lock other endpoints as well. For example to prevent misuse and if you are paying for a rate limit that can be exploited. Here is an additional article: https://cybersecurity.att.com/blogs/security-essentials/why-authorization-and-authentication-are-important-to-api-security-and-why-theyre-not-enough
Wrote something in this thread and want it removed? Request removal
Ask the community on Discord
This archive is read-only. New questions, office hours and product updates now happen in the Bravo Discord.
Join the Discord