API Authentication — JWT Tokens // API

API Authentication — JWT Tokens

The OODA Intelligence API uses JWT (JSON Web Tokens) authentication on every request.

Obtaining a token

Send a POST request to the authentication endpoint:

curl -X POST https://dashboard.oodaintel.com/api/v1/auth/token/ \
  -H "Content-Type: application/json" \
  -d '{"username": "your_username", "password": "your_password"}'

Response

{
  "access": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9...",
  "refresh": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."
}

Using the token

Send the access token in the Authorization header of every request:

curl -X GET https://dashboard.oodaintel.com/api/v1/monitoring/ \
  -H "Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."

Refreshing the token

When the access token expires, use the refresh token:

curl -X POST https://dashboard.oodaintel.com/api/v1/auth/token/refresh/ \
  -H "Content-Type: application/json" \
  -d '{"refresh": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9..."}'

Rate limiting

Request limits depend on the plan in force:

Plan Limit
Starter 100 req/min
Professional 500 req/min
Enterprise 2,000 req/min

Common errors

Code Description
401 Invalid or expired token
403 No permission for the resource
429 Rate limit exceeded