Cubewire supports two authentication paths depending on your use case:
| Method | Use case | Guide |
|---|---|---|
| Console Access | Human users managing vaults and policies | Console Access |
| Programmatic Access | Backend services calling the API | Programmatic Access |
For users signing into the dashboard at wallet.cubewire.com:
Dashboard authentication, MFA setup, and SSO configuration.
For backend services integrating with the Cubewire API:
API authentication using OAuth 2.0 client credentials.
Never expose secrets in client-side code. Store credentials in environment variables or a secrets manager. Rotate immediately if compromised.
| Practice | Why it matters |
|---|---|
| Use environment variables | Keep CLIENT_ID and CLIENT_SECRET out of source code |
| Refresh tokens proactively | Request new tokens before expiry to avoid failed requests |
| Apply least privilege | Assign only the permissions each credential needs |
| Monitor access logs | Detect unusual activity early |
| Rotate credentials regularly | Limit exposure window if credentials are compromised |
Cubewire supports two authentication paths depending on your use case:
| Method | Use case | Guide |
|---|---|---|
| Console Access | Human users managing vaults and policies | Console Access |
| Programmatic Access | Backend services calling the API | Programmatic Access |
For users signing into the dashboard at wallet.cubewire.com:
Dashboard authentication, MFA setup, and SSO configuration.
For backend services integrating with the Cubewire API:
API authentication using OAuth 2.0 client credentials.
Never expose secrets in client-side code. Store credentials in environment variables or a secrets manager. Rotate immediately if compromised.
| Practice | Why it matters |
|---|---|
| Use environment variables | Keep CLIENT_ID and CLIENT_SECRET out of source code |
| Refresh tokens proactively | Request new tokens before expiry to avoid failed requests |
| Apply least privilege | Assign only the permissions each credential needs |
| Monitor access logs | Detect unusual activity early |
| Rotate credentials regularly | Limit exposure window if credentials are compromised |