Authentication and Tokens
Obtain an authorization code, then exchange it using Basic authentication. Business APIs use a Bearer token; web login is a separate flow.
Endpoints
| Method | Endpoint | Path |
|---|---|---|
GET |
Authentication interface one (login callback method) | /api/authorize.do |
GET |
Authentication interface two (login-free JWT token method) | /api/authorizeByJWT.do |
POST |
refresh token | /api/refreshToken.do |
POST |
Get token | /api/token.do |
Integration Notes
Based on the supplied Babel API reference. Preserve exact endpoint paths and field casing. Confirm unspecified or inconsistent field types during integration rather than assuming undocumented parameters. Use the deployment's HTTPS domain and keep credentials out of public pages.