JWT (JSON Web Token) is a standardized protocol for securely transmitting information between parties as a JSON object. Here's how to use JWT tokens in our API:
1. Token Generation 🔄
To generate a JWT token, use the /API_Reference/en/Full/Security_Configuration
endpoint with your credentials. Example request:
POST /security/token HTTP/1.1
Content-Type: application/json
{
"username": "your_username",
"password": "your_password"
}
2. Token Validation ✅
Include the Authorization
header in your requests with the token format:Authorization: Bearer <your_jwt_token>
Valid tokens will grant access to protected endpoints. ❌ Invalid tokens will return 401 Unauthorized
.
3. Token Refresh ⏱️
Use /API_Reference/en/Full/Authentication_Token_Overview
to refresh expired tokens.
🔄 Note: Always store tokens securely and avoid exposing them in client-side code.
For advanced usage, check our API Security Best Practices guide. 📚