Authentication
Obtain and use bearer tokens to call the Cowdi API.
Every Cowdi API request is authenticated with a bearer token:
Authorization: Bearer <token>Partner token exchange
Trusted partners exchange a signed partner JWT for a Cowdi access token:
curl -X POST https://api.cowdi.co/v1/auth/exchange \
-H "Authorization: Bearer $PARTNER_JWT" \
-H "Content-Type: application/json" \
-d '{}'User sessions
User-facing clients sign in and refresh sessions through the auth endpoints in the reference. Store the returned access token and send it as a bearer token on subsequent calls.
Errors
The API returns standard JSON error bodies with a machine-readable code and a
human-readable description. Handle 401 by refreshing the token and 429 by
backing off and retrying.