Authentication Context

Authentication context is information about who is calling an API.

If a Velo function doesn't receive authentication context, it treats the call as if it was made by an anonymous site visitor. This restricts the Velo functions you can use in your code without overriding authentication using elevate().

Providing your HTTP functions with authentication context allows you to:

• Authorize only users with the right permissions for each Velo function, such as admins or site members.
• Use functions that return different responses based on the user who calls them, such as getCurrentMember().

Calling the HTTP Functions API using access tokens or API Keys sends authentication context to your site’s HTTP functions.