Authentication
How to authenticate requests to the Pylon API.
Status: Partner API keys are planned. Until they ship, integrations authenticate with user JWTs issued by Pylon's OpenIddict server.
Current model: JWT bearer tokens
All requests to /api/v1/* require a bearer token:
GET /api/v1/events HTTP/1.1
Host: api.pylon.pt
Authorization: Bearer <jwt>Tokens are obtained from the Pylon auth server via the OAuth 2.0 authorization code flow. See the auth endpoints in the sidebar under the Auth tag.
Coming soon: Partner applications and API keys
Partners will be able to:
- Register a partner application in their Pylon tenant.
- Generate API keys scoped to the application.
- Authenticate via
Authorization: Bearer <api-key>for server-to-server calls.
This section will be expanded when partner API keys ship.