Authenticate & Authorize

You must be an authenticated user to use ProviderTrust's Public API. We will utilize the OAuth pattern for authentication and authorization.

To authenticate:

1. Create an API Key inside the app under Profile->Account->API Keys.
   1. This API Key is a credential for logging in as the user who created it. For that reason, it is recommended that a Client Admin create a specific “machine user” account and create the API Key as that machine user.

{
   "apikey": "{{your api key here}}"
}

2. After authentication, you will receive a JWT token.

{
   "token": "{{insert token}}",
   "message": "Authentication Successful"
}

3. You must use the associated JWT token in the authorization header on all subsequent API requests ("Authorization": "Bearer {{token}}").
4. The JWT token is valid for 12 hours.

⚠️

HTTPS Only

Our APIs will reject calls made over HTTP to protect request and response information.