Front: Auth & Access Control
Docs-backedAPI token auth: Authorization: Bearer {api_token}. Tokens from Front Settings → API & OAuth → API Tokens. Account-scoped. HTTPS enforced. OAuth2 for multi-account Front apps. Webhook signature: Front signs payloads (x-front-signature header, HMAC-SHA256). Rate limiting: per-token, plan-dependent (typically 1000 req/min for Pro). Channel types: email, SMS, chat — each requires appropriate inbox configuration before use.