Sign in

v1

latestOpenAPI 3.1.02026-08-04103211436.0 KB
Authentication

Generate access token

Authenticates with email/password and returns a JWT idToken to use as a Bearer token in the Authorization header for every other request. The token expires 60 minutes after issuance; call this endpoint again with the same credentials to obtain a new one — there is no separate refresh endpoint. If email or password is missing or malformed, the validation error response never echoes back the submitted values.

post/authentication/token

Request body

emailstring required

Email address of the Embat service user used to authenticate.

passwordstring required

Password of the Embat service user. Keep it secret.

Example request

{
  "email": "erp-integration@acme-corp.com",
  "password": "your-service-password"
}

Response

Successful Response

idTokenstring required

JWT bearer token. Send it as Authorization: Bearer <idToken> on every other request. It expires 60 minutes after issuance; call this endpoint again with the same credentials to obtain a new one.

Example response

{
  "idToken": "eyJhbGciOiJSUzI1NiIsImtpZCI6IjE5YzY4In0..."
}