Authentication
Authenticate with an Access Token and API Key
- Obtain your credentials from the Storable API Integration team.
- Once you have your credentials, use them to call the
tokenendpoint to Get an Access Token - Use the access token along with your API Key to Authenticate REST API calls in the header.
Get an Access Token
Generate an access token with a POST request to the Storable token endpoint. This endpoint is protected using Basic Authentication where the username is the Client Id and the password is the Client Secret. The response will contain the access token which can be used to access the protected APIs. The following parameters are required in the token request:
| Parameter | Value |
|---|---|
| Authorization | Base64-encoded Client Id and Client Secret seprated by a colon |
| x-api-key | Client API Key |
The token endpoint is https://api.storable.io/auth/token
Request example:
curl --location --request POST 'https://api.storable.io/auth/token' \
-H 'Authorization: Basic bXktY2xpZW50LWlkOm15LWNsaWVudC1zZWNyZXQ=' \
-H 'x-api-key: 5XOZWgBi472xX72v6inMA6zX8xRxjbH47sqZK0eI'
Response example:
{
"access_token": "eyJhbGciOiJSUzI1NiIsImtpZCI6Imp3ay.long-token.here",
"token_type": "bearer"
}To optimize performance and reduce unnecessary load on the token endpoint, tokens should be cached and reused until expiration. The token endpoint is subject to rate limiting, so frequent or redundant requests for new tokens may be throttled.
The token response includes two custom HTTP headers to support Access Token caching and lifecycle management:
| Header | Sample Value |
|---|---|
| x-token-created-at | Thu, 31 Jul 2025 17:31:46 GMT |
| x-token-lifetime-seconds | 5400 |
Authenticate REST API calls
Authenticate REST API calls by including the Access Token and your API Key in the request headers. The following parameters are required in the request:
| Parameter | Value |
|---|---|
| Authorization | Access Token retrieved from the token endpoint |
| x-api-key | Client API Key |
Request example:
curl --location 'https://api.storable.io/sample-api/v1/info' \
-H 'Authorization: Bearer eyJhbGciOiJSUzI1NiIsImtpZCI6Imp3ay.long-token.here' \
-H 'x-api-key: 5XOZWgBi472xX72v6inMA6zX8xRxjbH47sqZK0eI'
