Security & Authentication

The API server authenticates all requests using HTTP Bearer Authentication. You must include with every API call:

• your access token in an Authorization request header
• the x-api-key in the request header

Below an example (cURL):

curl -X POST \
--data '{"username": "user@company.com", "password": "demoCompany"}' \
  https://api.geowox.com/auth/token

All API endpoints are secure HTTPS endpoints with SSL/TLS to ensure secure client-server communications. The client-server communication is encrypted and authenticated using a strong protocol (TLS 1.2).