Authentification

How to log in to the system with an employee credentials

In order to work with DCM you should log in to the system.

If you use your own JWT you don't need to do authentication via API.

The purpose of authentication is to restrict access to crypto-identifications and account information only to those who are explicitly allowed to do so.

Please use the following URL host for authentication: api.{your_alias}.integrate

What steps should you do for authentication?

Precondition: The employee should be registered (see function Create employee).

1. Create Log-in Flow

Error while loading OpenAPI operation — Can’t find supported Swagger/OpenAPI version in the provided document, version must be a string.

1. Log in

Error while loading OpenAPI operation — Can’t find supported Swagger/OpenAPI version in the provided document, version must be a string.

In the body of the request, you should fill in the user's parameters (e-mail, password) that you have filled in at registration.

It is important that body is sent via x-www-form-urlencoded format.

Example:

curl --location 'https://api.xxx.processing-stage.dcm.systems/kratos/self-service/login?flow=xxx' \
--header 'Accept: application/json' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'csrf_token=xxx' \
--data-urlencode '[email protected]' \
--data-urlencode 'method=password' \
--data-urlencode 'password=xxx'

In case of a successful response in the response body you will get the parameter session_token.

A session token must be sent in the HTTP Authorization Header for all other API requests (not applicable when JWT by Bank is used):

    Authorization: bearer ${session-token}