---
title: "Known problems"
manual: "API_KEY"
version: "1.0"
permalink: "https://docs.typo3.org/permalink/maikschneider/api-key:known-problems@1.0"
source: "KnownProblems/Index.rst"
rendered: "2026-10-27T08:22:54+00:00"
---

# Known problems {#known-problems}

-   **Keys can't be created in the backend**

    FormEngine can't show a secret once, so keys are created on the command
    line. A key record created in the list module has no hash and never
    authenticates. A backend module is planned
    ([#9](https://github.com/maikschneider/api-key/issues/9)).

-   **No rate limiting**

    Failed attempts are logged but not throttled. Limit requests in your web
    server or proxy for now
    ([#8](https://github.com/maikschneider/api-key/issues/8)).

-   **Bearer tokens behind Apache**

    See [Apache and the Authorization header](https://docs.typo3.org/permalink/maikschneider/api-key:security-apache@1.0).