Authentication
The most basic form of authentication is to perform a user login HTTPS request and receive a token in the response.
Send that token as a bearer token in the Authorization header on every request to the Nextspace API:
The same header accepts a session token from a user login and a long-lived access token, so code that authenticates a request does not need to know which kind of token it holds.
Login
Request body
Response
Javascript example
To invalidate the token, perform a logout HTTPS request authenticated with that same token.