API authentication
Obtaining a token, its lifetime, and rotating credentials.
Urbanice Admin1 min read
- API
- Security
Authenticating
- Exchange your client credentials for an access token.
- Send the token in the header of every request.
- Refresh before expiry rather than waiting to be rejected.
- Access tokens are short-lived.
- A leaked credential must be revoked immediately from the management screen.
Keep credentials server-side only. Never embed them in a mobile app or frontend bundle — both can be extracted.