Authentication

Bearer Token Authentication

All API endpoints require authentication using a Bearer token. You need to include the following Authorization header with all your requests:

Authorization: Bearer <your_access_token>

Obtaining an Access Token

Access tokens are obtained when you log in to the application. Your application should store this token securely and use it for all subsequent API requests.

Token Expiration

Access tokens have a limited lifetime. If your token expires, you'll need to obtain a new one by authenticating again.

Security Considerations

1. Never share your access token: Treat your access token like a password.

2. Use HTTPS: Always make API requests over HTTPS to ensure the token cannot be intercepted.

3. Store tokens securely: If you're building a client application, ensure tokens are stored securely.

4. Revoke compromised tokens: If you suspect a token has been compromised, revoke it immediately.

If you experience any authentication issues, please ensure your token is still valid and that you're correctly including it in the Authorization header of your requests.