API Authentication

Learn how to authenticate with the platform API to integrate features into your applications.

JWT Authentication

The API uses JWT (JSON Web Token) tokens for authentication. To obtain a token, make a login request with your credentials. The token must be included in the Authorization header of all subsequent requests.

Obtain a token

POST /api/auth/login
Content-Type: application/json

{
  "email": "usuario@empresa.com",
  "password": "tu_password"
}

// Respuesta
{
  "token": "eyJhbGciOiJIUzI1NiIs...",
  "refreshToken": "dGhpcyBpcyBhIHJlZnJl..."
}

Use the token

GET /api/workflows
Authorization: Bearer eyJhbGciOiJIUzI1NiIs...
X-Project-ID: tu_project_id

All requests must include the X-Project-ID header to indicate which project you are operating on.

Renew the token

JWT tokens have an expiration time. Use the refreshToken to obtain a new token without re-authenticating. Make a POST to /api/auth/refresh with the refresh token in the body.