Tellio
All docs pages
API docs
Authentication
Sign in, send the token, refresh it before it expires.
Every request except sign-in is authenticated with a bearer token that belongs to a user. What it can do depends on that user’s role.
Sign in
- POST
/auth/loginReturns the user, their role and permissions, and an access and refresh token.
Body
| Name | Type | Details |
|---|---|---|
emailrequired | string | The user's work email. |
passwordrequired | string | Their password. |
subdomainrequired | string | Your workspace name. |
Send the token
Authorization: Bearer YOUR_ACCESS_TOKENRefresh it
Access tokens are short-lived, about 15 minutes. Exchange the refresh token for a new pair instead of signing in again.
- POST
/auth/refreshReturns a new access token and refresh token.
Body
| Name | Type | Details |
|---|---|---|
refreshTokenrequired | string | The refresh token from sign-in or the last refresh. |