# Authorization

In this article, you will find authorization-related basic concepts used in the documentation.

CKEditor Cloud Services have a few authorization methods, and each of them is suited for a given communication way. To find more detailed information, please check the linked articles.

The diagram below shows what authorization methods are available and where given operations need to be performed.

<a id="api-secret">

## API Secret

An API secret is a secret used to generate a [signature](../../developer-resources/security/request-signature.md) for requests made to the REST API.

It is also used to [verify webhooks requests](../../developer-resources/webhooks/overview.md#security).

API secrets can be [managed through the Customer Portal, or through the Management Panel in case of On-premises installations](../../developer-resources/security/api-secret.md#api-secrets-management).

<a id="access-key">

## Access Key

An Access Key is a key used to [generate signed tokens](../../developer-resources/security/token-endpoint.md).\
Access Keys are generated in [the Customer Portal or in the Management Panel in case of On-premises installations](../../developer-resources/security/access-key.md#managing-the-access-credentials).

<a id="token-endpoint">

## Token endpoint

An endpoint created by a customer which returns a token. It needs to be created by customers and placed in the customers’ application. Thanks to that, a customer has the full ability to control the user data and privileges sent.

You can read more about the token endpoint in the [Token endpoint](../../developer-resources/security/token-endpoint.md) guide.

<a id="token">

## Token

It is returned from a Token endpoint. In the payload, it contains all user data and [roles and permissions](../../developer-resources/security/roles.md) of the user to a given document. Based on a `sub` property of the token, the usage of the application is billed.

You can read more about tokens and their generation in a [dedicated section](../../developer-resources/security/token-endpoint.md#token).

---

Full index of the Cloud Services documentation: [llms.txt](../../../llms.txt)