Auth Tokens
Every API request must include a valid Bearer token in the Authorization header.
Creating a Token
- Go to the Admin Dashboard.
- Open the Auth Token Management page.
- Select a user and click Generate Token.
- Copy the token immediately — it will not be shown again.
Using a Token
Include the token in your request headers:
curl -H "Authorization: Bearer YOUR_TOKEN" \ -H "X-Subscription-Status: active" \ https://finance-api.example.com/api/protectedToken Security
- Keep your tokens secret.
- Do not commit tokens to version control.
- Revoke compromised tokens immediately from the dashboard.