Skip to content

JWT

Authenticating with normal credentials (email/phone and passoword) will return a JWT. This token will be good for a pre-determined amount of time, after which the token will be refreshed.

Refreshed tokens will be provided from any endpoint that is authenticated. The general flow goes like this:

  1. Authenticate, and get initial token, provided in header Authorization For more information see User Authentication
  2. Use token with any request to API (provided in the Authorization header)
  3. If token is refreshed, response will contain the Authorization header containing the new token.
  4. Update stored token, and use new one for any subsequent requests