Getting Started with Dealer Studio
Dealer Studio is a dealership management platform built on Ruby on Rails. The system exposes a JSON-based RESTful API. This guide covers the setup and configuration required to begin making API requests to Dealer Studio.
Authentication
Section titled “Authentication”- Dealer Studio uses API Bearer tokens for Authentication
- API keys can be assigned to multiple dealerships and each API key has defined permissions to perform specific actions. Usually each third party has one API key.
- To obtain an API key for Dealer Studio, please email support@dealerstudio.com.au
Security
Section titled “Security”- We use TLS/HTTPS encryption for all API communications
- CORS configured for cross-origin requests
- CSRF protection for web sessions
- JWT tokens (via OAuth2 access tokens)
- IP whitelisting available for API keys
- Rack::Attack middleware for DDoS protection
- Certain endpoints are rate-limited, and this will depend on the specific endpoint and the third party