Stay up-to-date with the latest features, improvements, and fixes for Refgrow.
project_secret
for each project, which, if set, requires requests to /api/referral-data
and other widget-related endpoints to be authenticated via an Authorization: Bearer <secret>
or X-Project-Secret: <secret>
header. If a project does not have a project_secret
configured, the API remains accessible without this specific token. Updated embed.js
to send the secret if provided via data-project-secret
. Added UI in project settings to generate/manage this secret key.Turn referrals into your most valuable growth channel