○ api - the api key
to get access to the api, it is required to use an api key. an administrator of the learning environment (who also has the tenant role) can request an api key by sending an email to support@anewspring.com.the api key is sensitive information, so we can only supply it if the email address matches the user account in the learning environment. we will then send a part of the api key by email and communicate the last characters by phone.the api key needs to be kept secure. be careful who you send it to and don't place it anywhere in javascript code that the browser will load. the api is not supposed to be called from the client side.the api key can potentially give someone access to all user data in your learning environment.if the api key gets compromised, please contact us as soon as possible. we can delete the api key so it can't be used anymore and then provide you with a different one.for further security measures we have the possibility to use two kinds of whitelists per api key:whitelisting by ip address. this way the api can only be called with this api key from servers with an ip address in the whitelist.whitelisting by api call. this way only specific api calls can be used with this api key. for example, if only adduser is whitelisted, the api key will only give access to this call and any other call will result in an error.the next article explains how to call the api and also how to include the api key:api - calling the api and the output format