Authenticate to the API

Authenticate to the API

As of March 18th, 2020, all public-facing Meridian APIs require authentication for all uses, including reading and writing operations. All APIs support Token authentication.

There are a few Location Sharing APIs that support Basic authentication as well, but Token authentication is still recommended in these instances.

Get a Token to Authenticate

Complete these steps to get a token to authenticate to the Meridian API.

You’ll generate application tokens on the Locations list page. If you’re looking at a specific location, click the Meridian logo in the top left corner to return to the Locations list page.

1. Once you’ve logged in to the Editor, click the Application Tokens tab.
2. Click Add +.
3. In the NAME field, give the application token a meaningful name.
4. Click Generate Token.
5. In the Permission Type dropdown, choose either Organization or Location. If you select Organization, the token will provide access to all of the locations in that organization.
6. In the new Organization/Location dropdown, browse or search for a specific organization or location.
7. In the Level dropdown choose either Owner or Read-Only. Owner tokens provide read and write access.
8. Click Save.

Use the Token

In order to use the token to authenticate to the Meridian API, include an Authorization header with the token value in every request.

For example: Token eyJ0eXBiOiJKV1QiLCDhbGciOiJKUzI1NiJ9.eyJ2YJx1ZSI4IjczODc0MGNlYTM3MGUxNDMxNTI1MWExNGFkTTdmOTliZCE2MmE3YTgiLCJ0IjoxNzI1OTk0NTU4fQ.hOdpxhFFy0XWLFVtEXxoz1r57yprwmK9yQF6ncf-lz1

Tokens don’t expire, but they can be deleted. The easiest way to do this is on the Meridian Editor Permissions page on the Application Tokens tab.