Authentication

The Verify by Tiller API employs a secure authentication mechanism to ensure that only authorised users can access the API. This section covers everything you need to know about obtaining and using authentication tokens to interact with the Verify by Tiller API.

Obtaining your Token

To obtain an authentication token, you will need to make a POST request to our authentication endpoint with your user credentials.

❗It is important that the user credentials have been given the correct permissions. Please contact [email protected] to request the API permissions be added to the user profile.

Here's a step-by-step guide:

1) Ensure that your user credentials have API permissions. If you are unsure, contact [email protected].

2) Send a POST request with your user credentials in the request body. Use 'password' in the grant type.

post

Get access tokens for your requests. Use {Authorization: Bearer access_token} inside headers for all subsequent requests.

Authorizations

Bearer

AuthorizationstringRequired

Header parameters

Content-TypestringRequiredDefault: application/x-www-form-urlencoded

Body

application/json

usernamestringOptional

passwordstringOptional

grant_typestring · enumRequiredPossible values:

client_idstringOptional

client_secretstringOptional

Responses

200Success

application/json

access_tokenstring · min: 1Required

expires_innumberOptional

token_typestring · min: 1Required

post

/ext/authentications/token

HTTPcURLJavaScriptPython

POST /api/v1/ext/authentications/token HTTP/1.1
Host: api.tiller-verify.com
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 103

{
  "username": "text",
  "password": "text",
  "grant_type": "password",
  "client_id": "text",
  "client_secret": "text"
}

200Success

{
  "access_token": "text",
  "expires_in": 1,
  "token_type": "text"
}

After successfully authenticating, you will receive a JSON response containing your 'access_token'. This token must be included in the Authorization header of your subsequent API requests. It should be included as a Bearer token.