Authentication

Wonderflow’s API token is a secure method for replacing your credentials when sending requests via the Wonderflow API, ensuring your account remains safe and secure.

​

Generate a new API token from the settings page

​

API Token Permissions

• A token has a validity of 30 days.
• A token grants full access to all the Wonderflow APIs endpoints.
• A token is linked to a specific api role and can’t be associated to any other user role.

​

More details on Bearer Authentication

Bearer authentication is a security scheme commonly used to authenticate API requests. In this method, the client includes an access token in the Authorization header of the HTTP request to access protected resources on the server. The access token, also known as a bearer token, serves as a proof of the client’s identity and permissions.

Key Points about Bearer Authentication:

• Token-Based: Bearer authentication uses tokens for authorization rather than sending credentials like usernames and passwords with each request.
• Authorization Header: The client includes the access token in the Authorization header with the Bearer scheme (Authorization: Bearer <access_token>).
• Stateless: Bearer tokens are self-contained and do not require the server to store session information, making the authentication process stateless.
• Secure Communication: Bearer tokens are transmitted over HTTPS to ensure secure communication between the client and the server.
• Expiration and Revocation: Access tokens typically have an expiration time and can be revoked if compromised or no longer needed.

By using Bearer authentication with API key and secret in the authorization endpoint, users can securely authenticate themselves and access the REST APIs while maintaining the confidentiality and integrity of the communication.