---
id: "en/developer-api-auth"
title: "Authentication and Token"
language: "en"
description: "Authentication and Token interface paths, methods, parameters and return fields."
canonical_url: "https://www.babel.cc/public/babelwiki/en/developer-api-auth.html"
markdown_url: "https://www.babel.cc/public/babelwiki/ai/en/developer-api-auth.md"
alternates: {"en": "https://www.babel.cc/public/babelwiki/ai/en/developer-api-auth.md", "zh": "https://www.babel.cc/public/babelwiki/ai/zh/developer-api-auth.md"}
reading_note: "文档记录不等于当前部署能力；以实际版本、授权模块与配置为准。保留原文的可选、限制及待确认说明，勿补猜接口。 / Documentation is not a guarantee for every deployment. Preserve optional-module requirements, limitations and unresolved API contracts."
---

# Authentication and Tokens

Obtain an authorization code, then exchange it using Basic authentication. Business APIs use a Bearer token; web login is a separate flow.

## Endpoints

| Method | Endpoint | Path |
| --- | --- | --- |
| `GET` | [Authentication interface one (login callback method)](https://www.babel.cc/public/babelwiki/en/api-get-api-authorize-do.html) | `/api/authorize.do` |
| `GET` | [Authentication interface two (login-free JWT token method)](https://www.babel.cc/public/babelwiki/en/api-get-api-authorizebyjwt-do.html) | `/api/authorizeByJWT.do` |
| `POST` | [refresh token](https://www.babel.cc/public/babelwiki/en/api-post-api-refreshtoken-do.html) | `/api/refreshToken.do` |
| `POST` | [Get token](https://www.babel.cc/public/babelwiki/en/api-post-api-token-do.html) | `/api/token.do` |

## Integration Notes

Based on the supplied Babel API reference. Preserve exact endpoint paths and field casing. Confirm unspecified or inconsistent field types during integration rather than assuming undocumented parameters. Use the deployment's HTTPS domain and keep credentials out of public pages.

[API overview](https://www.babel.cc/public/babelwiki/en/developer-api-overview.html) · [MCP quick start](https://www.babel.cc/public/babelwiki/en/mcp-integration.html)