Authentication

Using your token in API requests

Every request sent to Connected Sensors requires a token. A token is a unique key that authorizes requests sent to Connected Sensors.

Tokens valid for 6 hours and can be generated using your account’s API Key. The API token is found under the My Profile section on dashboard.connectedsensors.com. More information about how to obtain your token.

There are two ways to send a token in a request:

Sending the token in the Header (recommended):
X-Auth-Token=token
Sending the token as query parameter:
?token=token

While sending your token as a query parameter might be more straightforward, we only advise doing so in prototyping stages as the token is visible and thus a lot less secure. For production stages, we strongly advise sending the token in the X-Auth-Token header.

🚧
Authentication without Header - Not Recommended!
While it is possible to send the authentication token as a query parameter, sparing the X-Auth-Token header, it is much less secure. Including a token -or any security credential- in a URL path will make it easily readable in router logs, browsers' history, and packet sniffers.

//Example Request to create a device with Token in the Header

curl -X POST 'https://api.connectedsensors.com/api/v2.0/devices/' \
 -H 'Content-Type: application/json' \
 -H 'X-Auth-Token: oaXBo6ODhIjPsusNRPUGIK4d72bc73' \
 -d '{}'
 
 
 //Example Request to GET all devices with Token sent as Query Parameter
 
 curl -X GET 'https://api.connectedsensors.com/api/v2.0/devices/?token=asdf657asdf675asdf876asdf' \

Get an API Token

Tokens are provided by Connected Sensors upon onboarding. Contact support desk to request an invitation.