Optimizely Graph resources support various authentication methods (Basic, Bearer, HMAC, and Single key), each suited to different use cases. Users can select the option that best meets their needs.

Available methods can be grouped as follows

• Admin access: Allow the sender to manage/access any resource without a limitation
  • HMAC
  • Basic
• Restricted access: Allow the sender to manage/access some resources with some limitations based on the identity.
  • HMAC + (cg-username and cg-roles headers)
  • Basic
  • Bearer (JWT)
• Public access: Allow the sender to access publicly available resources (ex. published CMS content)
  • Single Key