Authentication

All API requests require authentication. The platform uses token-based authentication.

Obtaining a Token

POST /api/v1/auth/login
Content-Type: application/json

{
  "email": "user@example.com",
  "password": "your-password"
}

Using the Token

Include the token in the Authorization header of all subsequent requests:

Authorization: Bearer <your-token>

Token Refresh

Tokens expire after a configurable period. Use the refresh endpoint to obtain a new token:

POST /api/v1/auth/refresh
Authorization: Bearer <your-token>

Error Responses

Status Code	Description
401	Invalid or missing token
403	Insufficient permissions