Glossary: Real-Time Apps with WebSockets

API key

Also written: x-api-key

A shared secret sent in a header, here `x-api-key`, so non-staff callers like the order-ahead page can place orders without a user token. Without it, anyone could flood the board.