About Authorization

Wix handles most authentication automatically for sites built with Velo. Your backend code runs as the site and your frontend code runs as the current visitor or member. No tokens or credentials to manage.

Authorization becomes relevant when you need to call Wix APIs from outside the site context or perform admin operations. For a full explanation of how authentication and permissions work, see Authentication Methods and Permissions.

The following articles cover the scenarios where you need to handle authorization explicitly:

• Elevate API Call Permissions: Call restricted Wix APIs from backend code without switching to a more privileged authentication method.
• Generate an API Key: Create a long-lived credential for external tools and integrations that need admin access to your site.
• Make REST API Calls with an API Key: Authenticate REST requests using an API key.