X-Git-Url: http://source.bookstackapp.com/bookstack/blobdiff_plain/7bbcaa7cbc96d1da4758d9eee2ffc156cb64545b..refs/pull/3555/head:/resources/views/api-docs/parts/getting-started.blade.php diff --git a/resources/views/api-docs/parts/getting-started.blade.php b/resources/views/api-docs/parts/getting-started.blade.php index ca28a7d90..edc526971 100644 --- a/resources/views/api-docs/parts/getting-started.blade.php +++ b/resources/views/api-docs/parts/getting-started.blade.php @@ -1,5 +1,27 @@

Getting Started

+

+ This documentation covers use of the REST API.
+ Some alternative options for extension and customization can be found below: +

+ + + +
+
Authentication

To access the API a user has to have the "Access System API" permission enabled on one of their assigned roles. @@ -138,4 +160,23 @@ "message": "No authorization token found on the request" } } - \ No newline at end of file + + +


+ +
Rate Limits
+

+ The API has built-in per-user rate-limiting to prevent potential abuse using the API. + By default, this is set to 180 requests per minute but this can be changed by an administrator + by setting an "API_REQUESTS_PER_MIN" .env option like so: +

+ +
# The number of API requests that can be made per minute by a single user.
+API_REQUESTS_PER_MIN=180
+ +

+ When the limit is reached you will receive a 429 "Too Many Attempts." error response. + It's generally good practice to limit requests made from your API client, where possible, to avoid + affecting normal use of the system caused by over-consuming system resources. + Keep in mind there may be other rate-limiting factors such as web-server & firewall controls. +

\ No newline at end of file