3. API Authentication

3.1: Basic Authentication

Golfdigg OTA API uses Basic Authentication as the method for authenticating API requests. With Basic Authentication, partners include their API credentials in the request headers. Below are the details of using Basic Authentication with our API:

3.2: Authentication Credentials

To authenticate your API requests, you will need to include your credentials in the request header as follows:

Authorization: Basic base64_encoded(API_KEY)

• base64_encoded(API_KEY): This should be a Base64-encoded string of your api key.

3.3: Example Request Header

Here's an example of how to include the Basic Authentication header in your API request:

GET /api/endpoint
Host: ota-api.golfdigg.com
Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=

3.4: Security Best Practices

To ensure the security of your API credentials, follow these best practices:

• Store your API credentials securely.
• Use HTTPS for all API requests to encrypt data in transit.
• Avoid hardcoding credentials in your application code or sharing them publicly.
• Regenerate your API credentials if you suspect any security breach.