Authentication

Using the API on a client's behalf

Most of the time, you, as the API caller, will want to make API requests on behalf of a client registered in the BeeFast Saas platform.

1. Obtain the API credentials

In order to have an automated authorisation flow that can be implemented in a server to server manner but, at the same time, keep the user account credentials private, the platform allows each client to generate one or more API credentials in the client page from the SaaS Platform. This type of credentials can only be used by the API and does not provide (the API caller) direct access to the client account (API credentials cannot be used to directly login in the platform). API credentials are represented by a token that have to be generated by the client or the by the Organization Admin and collected by the API caller.

The BeeFast SaaS Platform user can manage the API credentials but, it's the API caller responsibility to securely handle the credentials.

2. Use the token

To make an API request on behalf of the client you have to provide the token in the Authorization header prefixed by "Bearer ".

curl -X GET \
  'https://api.beefast.eu/v2/delivery' \
  -H 'Authorization: Bearer THE_TOKEN' \
  -H 'Content-Type: application/json' \
  -H 'cache-control: no-cache'