API - Authorization

You have two options to authenticate against our API: 1) API Key 2) Json Web Token

Both methods can be used be by sending an “Authorization” header.

API Key usage

The example request will return a list of all apps of the company, the api key is assigned to.

POST /api/v2/apps
Request header
Host: v2.app-arena.com
Content-Type: application/json
Authorization: **YOURAPIKEY**

Json Web Token (JWT)

The token will automatically expire after 2 hours. It is meant for the use in browser for example for your Ajax requests.

The example request will return a list of all apps of the company, the token is assigned to.

POST /api/v2/apps
Request header
Host: v2.app-arena.com
Content-Type: application/json
Authorization: Bearer **JWT-TOKEN**

Generate user token

A user token can act in behalf of a user through the API. The token has the same access rights as the user account the user is generated from.

POST /api/v2/auth/token
Request header
Host: v2.app-arena.com
Content-Type: application/json
Request body
{
    "email":"s.buckpesch@iconsultants.eu",
    "password":"1234"
}
Data:
  • email (string) – Email address of the user you want to generate a token for
  • password (string) – Clear text password of the user you want to generate a token for

Generate api key token

An Api key token can be used independent from a user. The key advantage of an API key token is its limited access. You can define all access rights for api keys in the App-Manager Backend Developer Section.

POST /api/v2/auth/token
Request header
Host: v2.app-arena.com
Content-Type: application/json
Request body
{
    "apikey":"123456"
}
Data:apikey (string) – Apikey you want to generate a token for