Key-authenticated sample API endpoint (§14): every external request flows
Oturum
through the gateway, which verifies the API key (API-02), checks the IP allowlist (API-04), enforces the per-key rate limit (API-03), requires the `core.read` scope (API-12), logs the call (API-07), and returns the caller's tenant context. Modules expose their endpoints behind the same checks.
İstek
curl -X GET "https://api.blesyum.com/api/v1/whoami" \
-H "Authorization: Bearer <oturum-token>" \
-H "Accept: application/json"Yanıt
{
"data": "…",
"trace_id": "01JC…"
}