Authorization header / API tokens
Authorization headers allow you to access the INblue API and must be present on each request. Your API token gives you the same privileges as when logged into the INblue portal.
To generate your API Token
- Log into the INblue portal using your credentials.
- Click on your name on the top right corner to get to your profile information.
- From your profile page, select the "API TOKENS" tab and click the "Create New Api Token" button on the bottom.
- Enter a label for you API token and an expiration date, and click the "Generate API Token" button.
You can now use the "Copy" button to get your API token. - You are now ready to use the API by inserting your API token in a header like this
Authorization: Bearer XXXXXXXXXXXXXXXX...
API Token security practice
- Information in the token allow to impersonate you, make sure you treat it as sensitive information like a password.
- Choosing a sensible api token expiration will force you to regenerate new token and remove access to undesired applications.
- Keep your token tidy, if they are not used, remove them. Delete a token that has been revealed to another party to remove access.