Authentication and Authorization

Authentication

All API calls except authentication require JWT.

The Authentication endpoint requires three parameters: tenantId, APIKey, and userId (initial manager userId is provided by administrators).

Successful authentication will return JSON response with token value

JSON

{
    "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjExMTExMTExMTExMTExMTExMTExMTExMSIsInJvbGUiOiJzdWJtaXR0ZXIiLCJ0ZW5hbnQiOiJhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWEiLCJpYXQiOjE2NzU2MDg3NzgsImV4cCI6MTY3ODIwMDc3OCwic3ViIjoiMTExMTExMTExMTExMTExMTExMTExMTExIn0.JMZgPVe6XhfB1tEAaFnNjmIBGRBT3Ci9dzOfOOy7xpI",
    "role": "submitter",
    "userId": "111111111111111111111111"
}

Use the token value in all subsequent Signal API calls in the Authorization header

HTTP

Authorization: bearer <token>

Authorization

Every API endpoint has a list of authorized roles. manager can execute any endpoint call. Please refer to particular endpoint documentation for a list of authorized roles.

For security reasons use manager's role only where it is really necessary.