Concepts > HTTP Headers > Authorization
For authorized requests, the Authorization
header must contain the JWT, typically obtained from operations like usersCreate, authLogin, or similar. The format for this header is as follows: Authorization: Bearer <JWT>
. In other words, the token must be prefixed with the string "Bearer ".
Here's an example:
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJvcmlnX2lhdCI6MTU3MjM0MzA0OSwiaWF0IjoxNTcyMzQzMDQ5LCJleHAiOjQ3MjU5NDMwNDksInVzZXJfaWQiOiJ1c180VnpPa3pFaiIsImtleV9pZCI6ImtlX0FaRHp3MmozIn0.Xj9SNBVOrauSMMSBYl7Qziz5uDt1xCNw_TTQdHAbX7o