Pathfinder is supporting three different types of authentication. Depending of your needs and the support of your client library you can choose between:

• using API Keys

• using JWT

• using basic authentication

API KEY

This authentication method allows any user with required permission to create a special token via Pathfinder Client which can be used in the authorization header in every call to the API to allow access to the API in the name of the creator user without knowing user and password. This is meant to be used in 3rd party applications that will often be accessing the API.

The API tokens can have different expiration dates depending on the properties set while creating them.

Creating API key in Pathfinder client

JWT

This authentication method requires to first login using user and password, an then use the provided token as a response in the authorization header in every call to the API to allow access to the API. The JWT tokens are only valid for 24hs.

Basic authentication

This authentication method requires to login using user and password in every call to the API. In the request headers, you will see that the authorization header is going to pass the API a Base64 encoded string representing your username and password values, appended to the text "Basic ".