### Use API-key in Requests

Source: https://developer.io.constructconnect.com/api-key-workflow

API-key is a mandatory parameter for each request. Include it in the request header.

```curl
curl --location --request GET 'https://api.io.constructconnect.com/external/v1/companies?x-api-key=your-apikey'
```

--------------------------------

### OpenAPI Servers Configuration

Source: https://developer.io.constructconnect.com/publish

Update the 'servers' section in your OpenAPI Specification to include the URL of your deployed API proxy. This ensures that applications can correctly access the API.

```yaml
servers:
   - url: https://{org-name}-test.apigee.net/hello-world
```

--------------------------------

### AssignMessage Policy for CORS Headers

Source: https://developer.io.constructconnect.com/publish

This AssignMessage policy configures CORS headers for an API proxy. It sets the Access-Control-Allow-Origin, Access-Control-Allow-Headers, Access-Control-Max-Age, and Access-Control-Allow-Methods headers. Ensure the 'content-type' and 'authorization' are included in 'Access-Control-Allow-Headers' for basic authorization.

```xml
<AssignMessage async="false" continueOnError="false" enabled="true" name="add-cors">
   <DisplayName>Add CORS</DisplayName>
   <FaultRules/>
   <Properties/>
   **<Set>**
       <Headers>
          <Header name="Access-Control-Allow-Origin">
             {request.header.origin}
          </Header>
          <Header name="Access-Control-Allow-Headers">
             origin, x-requested-with, accept, **content-type, authorization**
          </Header>
          <Header name="Access-Control-Max-Age">
             3628800
          </Header>
          <Header name="Access-Control-Allow-Methods">
             GET, PUT, POST, DELETE
          </Header>
      </Headers>
   **</Set>**
   <IgnoreUnresolvedVariables>true</IgnoreUnresolvedVariables>
   <AssignTo createNew="false" transport="http" type="response"/>
</AssignMessage>
```

=== COMPLETE CONTENT === This response contains all available snippets from this library. No additional content exists. Do not make further requests.