POST /api/login_check
{
"username": "YOUR_USERNAME", // like "[email protected]" in dev environment
"password": "YOUR_PASSWORD" // like "superadmin" in dev environment
}
200 OK
{"token":"azerty1234.very_long_token.4321azerty"}
When calling any API route (except the /api/login_check
one of course), you'll have to send a token as a Authorization
header with the following value: Bearer my_token
.
GET /api/application
Authorization: Bearer azerty1234.very_long_token.4321azerty
When you don't provide a token.
{
"code": 401,
"message": "JWT Token not found"
}
When your token is expired.
{
"code": 401,
"message": "Expired JWT Token"
}