Skip to content

Authenticating to the API

Request

Bodyapplication/json

Getting an access token

To use the Luminovo API you need to get an access token using your authentication token. If you are an API customer, you can create an API token in the API Settings: https://{insert tenant name here}.luminovo.com/settings/organization/api-integration. If you want to upgrade your API package, reach out to your customer success manager.

curl --request POST \
  --url https://api.luminovo.com/token  \
  --header 'content-type: application/json' \
  --data '{"token":"cb7daea2-df5f-44de-99cc-213668e6c991"}'

Response

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c

API Request

You can use this bearer token with an Authorization Header in your request to obtain authorized access to Luminovo's API.

curl --request GET \
--url https://api.luminovo.com/{endpoint} \
--header 'authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c'

Token expiration

Bear in mind that the access token is only valid for 1 hour. You can always examine the JWT token by decoding it (e.g. using https://jwt.io/) and checking the exp claim. When a token expires please acquire a new one using the same method discussed earlier. The rotation of access tokens avoids exposure through token leakage. It is perfectly fine to refresh a token before its expiration!

Token length

Please note that the length of the bearer token can vary over time. Your implementation should not make assumptions about the token length as it may increase or decrease based on future authentication system updates. Always handle the complete token as provided by the API regardless of its size.

tokenstringrequired

The authentication token to exchange for an access token

POST
/token
curl -i -X POST \
  https://api.luminovo.com/token \
  -H 'Content-Type: application/json' \
  -d '{
    "token": "cb7daea2-df5f-44de-99cc-213668e6c991"
  }'

Responses

Success response

Bodytext/plain
string

The JWT access token

Response
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c