Authentication

Authentication is done via Bearer tokens. Please contact Scrive to sign up for the eID Hub and get your API bearer tokens. A company could have multiple tokens. All not-revoked tokens have equal access rights to any transaction created by the same company, e.g. a transaction created with one token could be accessed with another token.

You are responsible for ensuring that unauthorised persons do not obtain access to the API token. Storing API token is equivalent to storing a user password and similar precautions have to be applied.

Using bearer tokens
A standard HTTP authorization header with the bearer token should be included to authenticate your requests:
```
Authorization: Bearer <token>
```

Using bearer tokens​

Using bearer tokens