Distributing and using API-keys for web-applications
问题 I have a web-application for which I'm building a Drupal module that allows my customers to access certain data on my application. I intend to distribute secret API-keys to my customers who need to enter that value in their copy of the Drupal module. This Drupal module then talks to my web-application, but I need to make sure that the POST requests are indeed coming from that source. How can this 'secret key' be used to pass some information that when my application receives it, it knows: (a)