---
title: Authentication
description: Secure your Kora RPC endpoint
---

TODO: Component setup needed

## Outline:

### Authentication Methods

- None (development)
- API Key
- HMAC Signature
- Combined auth

### API Key Authentication

- Configuration
- Header format
- Client setup

### HMAC Authentication

- Secret configuration
- Signature generation
- Timestamp validation
- Client implementation

### TypeScript Examples

- API key setup
- HMAC signing
- Error handling

### Security Best Practices

- Key rotation
- Secret storage
- Rate limiting
- IP allowlisting

### Troubleshooting

- Common auth errors
- Debug tips
- Testing auth