Skip to content

API keys

For: comrce staff with the comrce cloudprint role Systemadministrator or SupporterRequires: The comrce cloudprint role Systemadministrator or Supporter; deleting a key needs SystemadministratorScreenshots show sample data

API Keys lists the keys that partner software uses to reach the comrce cloudprint API. A partner such as a shipping tool gets one key. Customers then allow that partner to use their account. Here you create a key, set its areas, switch it off or delete it. Open it with AdministrationAPI Keys.

  • Create a key for a partner. comrce cloudprint generates the key and shows it once in a dialog. Create a key
  • Decide what the partner may do. Five areas, from general functions to the archive. Edit a key
  • Switch a key off or on. One click in the list. Switch a key off
  • Delete a key. Systemadministrator only, after a confirmation. Delete a key
The comrce cloudprint page "API Keys" with a plus button next to the heading and the search field "Suche". The table lists four keys with ID, Kurzname, Anzeigename, Accountname, Kontakt E-Mail and Aktiviert: "Lagerflux ERP", "Versandmeister" and "ShopBrücke" without an account, and "Musterhandel GmbH" with the Accountname "Musterhandel GmbH 1842". Three rows have a tick under Aktiviert. In the "ShopBrücke" row, which has no tick, the action "API Key aktivieren" is highlighted; the other rows offer "API Key deaktivieren". Every row also has "API Key bearbeiten" and "API Key löschen".
Each key is switched on or off right in the list.
What this screenshot shows
Screen
API Keys
Highlighted
switches the key on
Also visible
Three partner keys without account, one private key of Musterhandel GmbH; Actions per row: activate or deactivate, edit, delete
Purpose
manage partner API keys
RegionWhat it showsWhat you do there
Plus button next to the headingTooltip API Key erstellen (create API key)Create a key
Suche (search)Your search termFilter the list as you type
TableID, Kurzname (short name), Anzeigename (display name), Accountname, Kontakt E-Mail (contact email), Aktiviert (active)Find the key
Actions per rowAPI Key aktivieren or API Key deaktivieren, API Key bearbeiten (edit), API Key löschen (delete)Act on the key

Two kinds of keys share the list:

  • Partner keys have no Accountname. Every customer can allow the partner. You create them here.
  • Private keys belong to one account and show its name and ID, such as Musterhandel GmbH 1842. Customers create them themselves for their own software.
  1. Select the plus button next to API Keys. An empty API Key page opens. Aktiviert is ticked, and so are the areas Allgemein and Eingabe.
  2. Fill in Anzeigename, Kurzname and the partner’s email address in Kontaktname.
  3. Enter the Return URI, the address of the partner’s software that customers return to after allowing it.
  4. Tick the areas the partner needs, and Einfacher Zugriff erlaubt if it uses the simple access.
  5. Select Ok. The dialog Der neue API Key (the new API key) shows the generated key.
The dialog "Der neue API Key" over the API Key form, shown after "Ok" saved a new key for "PaketPilot". The dialog holds only the new key value, e8b3d6f2-0a7c-4e1d-b9f4-6c2a8d0e5b13, which is highlighted, and the buttons "Abbrechen" and "Ok". Both close the dialog; "Ok" also returns to the API Keys list. The key stays visible later in the field "Key" on the page of that API key.
After saving, comrce cloudprint shows the generated key.
What this screenshot shows
Screen
API Key
Highlighted
“e8b3d6f2-0a7c-4e1d-b9f4-6c2a8d0e5b13”: shows the generated key to pass on to the partner
Also visible
Dialog Der neue API Key with the key value
Purpose
create a key for a partner

Pass the key to the partner’s contact. It stays readable later in the field Key of the key’s page. A new key here is always a partner key: the page has no field for an account.

Select API Key bearbeiten in the key’s row. Change the fields and select Ok. The list opens again. Abbrechen returns without saving.

The comrce cloudprint page "API Key" for "Versandmeister". The first card shows the read-only fields "Key" with the key value, an empty "Accountname" and "Loginfehler" 0. The second card has "Anzeigename", "Kurzname", "Beschreibung", "Kontaktname" with technik@example.org and "Return URI". The checkbox "Aktiviert" is ticked, and the highlighted checkbox "Einfacher Zugriff erlaubt" is not. Under "Zugriff auf folgende Bereiche:" the areas Allgemein, Eingabe and Ausgabe are ticked, Verwaltung and Archiv are not. "Abbrechen" and "Ok" end the page.
The key's page sets its names, contact, return address, simple access and areas.
What this screenshot shows
Screen
API Key
Highlighted
“Einfacher Zugriff erlaubt”: offers the key for the simple API access
Also visible
Read-only Key, Accountname and Loginfehler; Areas Allgemein, Eingabe, Ausgabe ticked
Purpose
edit one partner key

The areas under Zugriff auf folgende Bereiche: (access to these areas) decide what the partner may do:

AreaWhat the partner may do
Allgemein (general)Statistics and metrics, and register webhooks where other areas allow it
Eingabe (input)Send documents into comrce cloudprint, read the input endpoints and check job status
Ausgabe (output)Register as a Service Client and create webhooks
Verwaltung (management)Manage the whole account. The description on screen is cut off mid-sentence.
Archiv (archive)Access the internal archive

Example: a shipping tool that sends labels to print needs Allgemein and Eingabe. Software that prints itself, as a Service Client does, also needs Ausgabe.

Select API Key deaktivieren in the key’s row. It takes effect at once, without a confirmation. The tick under Aktiviert disappears, and the row offers API Key aktivieren instead.

  1. Select API Key löschen in the key’s row. A confirmation names the key’s ID and display name.
  2. Select Ok. The key disappears from the list.
Where

The checkbox below Aktiviert on the key’s page.

What

Offers the partner in the simple API access, where customers create a user name and password for it. Without it the partner appears only for the OAuth access.

Why

Simple partner software can’t run an OAuth sign-in. It signs in with fixed credentials instead.

Where

The read-only field Loginfehler (login errors) on the key’s page.

What

Counts failed sign-ins with this key. Above 50, comrce cloudprint refuses sign-ins with This api key is currently locked due to too many login attempts. The app never sets the count back to zero. A locked key then works only about once a day.

Why

A high count means the partner sends wrong credentials. Ask the developers to reset the counter once the partner fixed them.

Where

The field Kontaktname (contact name) on the key’s page.

What

Holds the partner’s contact email address. The list shows it as Kontakt E-Mail.

Why

Despite the label, enter an email address: it is what the list shows.

Where

The field Return URI on the key’s page.

What

The address of the partner’s software. After a customer allows the partner, comrce cloudprint sends them back there.

Why

A wrong address leaves customers stranded after they allowed the partner.

Other controls on this page (7)
ControlWhat it doesWhy
KeyThe key value, read-onlyPass it on again
AccountnameThe account of a private key, read-onlyTell private keys from partner keys
AnzeigenameThe name customers see for the partnerRecognisable partner
KurznameA short identifier of the partnerInternal reference
Beschreibung (description)Free text about the partnerContext for colleagues
AktiviertSame as the switch in the list–
SucheFilters as you type, also by key value and return URIFind a key from a partner’s question
Part of the pageSystemadministratorSupporter
List, search, create, edit, switch on and offyesyes
API Key löschenyesno
TopicFact
Key valueGenerated by comrce cloudprint, can’t be changed
Switching offStops new authorizations only
After deletingGone for good; only a Systemadministrator deletes
Login error lockAbove 50 failed sign-ins, no reset in the app
New keys hereAlways partner keys without account

Where do I see the key again after closing the dialog?

Section titled “Where do I see the key again after closing the dialog?”

Open the key with API Key bearbeiten. The field Key at the top shows the value, read-only. Anyone with access to API Keys can read it.

Only what the software needs. A tool that sends documents to print needs Allgemein and Eingabe, which is also the default for a new key. Add Ausgabe only for software that prints itself like a Service Client.

Not here. A key created on API Keys has no account and is offered to every customer. Customers create private keys for their own account themselves.

No. comrce cloudprint generates the value when you create the key. To give a partner a new value, create a new key and delete the old one.

Does switching a key off stop the partner?

Section titled “Does switching a key off stop the partner?”

Only for new customers. Customers who allowed the partner before keep their access, and so does the simple access. Delete the key to stop every request.

API Key löschen is for the comrce cloudprint role Systemadministrator only. As a Supporter you don’t see it. Switch the key off and ask a Systemadministrator.

What happens to customers when I delete a key?

Section titled “What happens to customers when I delete a key?”

Their partner software can’t reach comrce cloudprint any more. Every request with the deleted key is refused as Api key is not valid. The customers need a new partner key.

A partner reports “This api key is currently locked”. What now?

Section titled “A partner reports “This api key is currently locked”. What now?”

The key has more than 50 failed sign-ins in Loginfehler. Ask the partner to fix their credentials. Then ask the developers to reset the counter, because the app can’t.

Check Aktiviert in the list. A switched-off key refuses new customers with Der gewünschte API Partner existiert nicht oder ist nicht für neue Anmeldungen freigeschaltet. Also check that the partner asks only for areas ticked on its key.

SymptomWhat to check
Der gewünschte API Partner existiert nicht oder ist nicht für neue Anmeldungen freigeschaltet.The key is switched off. Switch it on in the list.
Der gewünschte API Partner darf auf ein oder mehrere der angegebenen Scopes nicht zugreifen.The partner asks for an area that isn’t ticked on its key. Tick it, or ask the partner to drop it.
This api key is currently locked due to too many login attempts.Loginfehler is above 50. The developers reset it.
Api key is not validThe key was deleted, or the partner sends a wrong value. Compare with Key.
API Key löschen is missingYour role is Supporter.