JWT (JSON Web Token) is a standardized protocol for securely transmitting information between parties as a JSON object. Here's how to use JWT tokens in our API:

1. Token Generation 🔄

To generate a JWT token, use the /API_Reference/en/Full/Security_Configuration endpoint with your credentials. Example request:

POST /security/token HTTP/1.1
Content-Type: application/json

{
  "username": "your_username",
  "password": "your_password"
}

2. Token Validation

Include the Authorization header in your requests with the token format:
Authorization: Bearer <your_jwt_token>

Valid tokens will grant access to protected endpoints. ❌ Invalid tokens will return 401 Unauthorized.

3. Token Refresh ⏱️

Use /API_Reference/en/Full/Authentication_Token_Overview to refresh expired tokens.
🔄 Note: Always store tokens securely and avoid exposing them in client-side code.

JWT_Token_Flow

For advanced usage, check our API Security Best Practices guide. 📚