Unsure which API key to use for granting an entitlement in the API v1

Hey ​@spthomas5,

You’re correct that you would want to use the secret API key, so that is a strange error that you’re getting. Are you able to share the request that the function is making? You can also open a ticket with our support team if you’d prefer to share information that way: https://app.revenuecat.com/settings/support?tab=contact

Essentially, I’m doing something like 

// Edge function
const revenueCatUrl = `https://api.revenuecat.com/v1/subscribers/${revenuecat_customer_id}/entitlements/{Entitlement}/promotional`;

const grantBody = {
  duration: 'lifetime' //
};

const revenueCatResponse = await fetch(revenueCatUrl, {
  method: 'POST',
  headers: {
    'Authorization': `Bearer ${revenueCatApiKey}`,
    'Content-Type': 'application/json',
    'X-Platform': 'ios'
  },
  body: JSON.stringify(grantBody)
});

// Error received:
// {"code":7243,"message":"Secret API keys should not be used in your app."}

In this case, it seems the error is being triggered due to the platform header signalling that this is an iOS request. This a security measure to protect against developers architecting their applications with secret keys in their app bundles.
 
To resolve the issue, simply remove this line:

'X-Platform': 'ios'

Let me know if that works!