Kript authenticates your API requests using your account’s API keys. If you do not include your key when making an API request or use one that is incorrect or outdated, Kript will return a 401 error.
You can view and manage your API keys in the Kript Dashboard.
We use two types of API keys: API KEYS and SECRET KEYS
| CREDENTIAL | DESCRIPTION |
|---|---|
| API KEY | This is required together with your secret key to generate your authorization token. This can be used on the client-side (web or mobile). |
| SECRET KEY | This should be kept confidential and only stored on your own servers (such as in an environment variable or credential management system). Your account’s secret API key can perform any API request to Kript without restriction. |
Authentication
Kript uses OAuth 2.0 as the basic security protocol. To access kript endpoints you'd need to get an access token that grants you access to restricted endpoints.
Authentication URL
HTTP METHOD - POST: https://sandbox.kriptup.io/api/v1/auth/login/
With Kript, you can authorize your API calls by generating an access token. To get one, you simply need to call the login endpoint. You send HTTP requests with the Authorization header that contains the word Basic followed by a space and a base64-encoded string API_KEY:API_SECRET.
For example, to authorize with API keys:
| Credentials | Value |
|---|---|
| API Key | KPT_TEST_926bf7290b |
| API Secret | HgS_XwiD4uUCucOJgNKiuKQot1WnctxmdE6CyhQH |
Authorization Sample
Authorization Header: Basic base64(API_KEY:API_SECRET)
Authorization Header: Basic TUtfVEVTVF9TQUY3SFI1RjNGOjRTWTZUTkw4Q0szVlBSU0JUSFRSRzJOOFhYRUdDNk5M
Once done, you then make a request to the login API using OAuth2 protocol to generate an access token that will be used to make calls to other restricted endpoints.
{
"token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJidXNpbmVzc19pZCI6MywidXNlcl9pZCI6MiwiZXhwIjoxNjUwNzYzNzQ4fQ.0NVC2_5pMkdjloeK9ba0GY6AszHIkOm1eEk3TZr0wfU",
"expires": 21600
}
Access Token
The access token gotten from the login API expires after 6 hours.
Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJidXNpbmVzc19pZCI6MywidXNlcl9pZCI6MiwiZXhwIjoxNjUwNzYzNzQ4fQ.0NVC2_5pMkdjloeK9ba0GY6AszHIkOm1eEk3TZr0wfU