Version: 1.0

Athari API Access Management Service

The API Access Management Service is the central gateway for platform partners and external systems. It is responsible for securely managing API clients, their credentials, and access permissions. Core functionality includes:

• Client Registration and Management using Keycloak for identity persistence (including client details, rate limits, and service enablement flags).
• API Key Generation and Validation using HMAC SHA-256 for secure request authentication.
• Access Control and Security checks, including IP Whitelisting validation.
• Orchestration of requests to internal domain services, such as Uplink, Water Receipts, Water Credits, and Billing.
• Client APIs for customer lookup and recharge initiation.
• Outbound Webhook Delivery for notifying clients of important events.

Authentication

API Key: BearerAuth

Security Scheme Type:	apiKey
Header parameter name:	Authorization