Overview

Flabs authentication APIs allow you to securely authenticate clients and manage tokens for API access.

Authentication Flow

Our authentication system uses a two-token approach:

  1. Auth Token: Valid for 10 minutes, used for API requests
  2. Refresh Token: Expires after 30 days of inactivity; used to obtain new authentication tokens.

All authentication tokens should be included in the Authorization header using the Bearer scheme.

Getting Started

To integrate with our authentication system:

  1. Obtain client credentials (Client ID and Client Secret)
  2. Generate an initial auth token using the token endpoint
  3. Store both tokens securely
  4. When the auth token expires, use the refresh endpoint to get the auth token again with logging again.