API Authentication

Apr 5, 2026 · 2 views

Authentication Methods

All API endpoints (except public ones) require authentication.

Method 1: Bearer Token (Recommended)

curl -H "Authorization: Bearer YOUR_TOKEN" http://localhost:9440/api/list

Method 2: Query Parameter

curl http://localhost:9440/api/list?token=YOUR_TOKEN

Token Types

Admin Token

• Full access to all API endpoints
• Can manage tenants, profiles, and settings
• Configured in Settings → Admin Token

Tenant Token

• Scoped access to tenant's own folders
• Can upload, list, download, and delete files
• Cannot access management APIs

Public Endpoints (No Auth Required)

• GET / — Service info and status
• GET /demo — Demo form
• POST /demo/sign — Demo signing