Overview
PingBack’s API uses JWT (JSON Web Token) Bearer tokens to authenticate requests. You must include a valid token in theAuthorization header of every request except for /auth/register and /auth/login.
Base URL
How to get a token
- Register a new account using POST /api/v1/auth/register.
- Log in with your credentials using POST /api/v1/auth/login. The response includes your
access_token.
How to pass a token
Include the token in theAuthorization header of every authenticated request:
Token lifetime
Tokens are long-lived. Store them securely and rotate them if you suspect a compromise.Endpoints
| Endpoint | Description |
|---|---|
| POST /api/v1/auth/register | Create a new PingBack user account |
| POST /api/v1/auth/login | Authenticate and receive a Bearer token |
| GET /api/v1/auth/me | Retrieve the authenticated user’s profile and business context |
All API endpoints except
/api/v1/auth/register and /api/v1/auth/login require a valid Bearer token in the Authorization header.