What kind of security is the OceanIO API supported by?

The OceanIO platform uses JSON Web Token (JWT) to ensure secure information exchange.

Authentication towards the system is done by calling a post to an authentication endpoint with the username and password created.

The password must be at least 12 characters long with a minimum of one lower case letter, one upper case letter, one number and one special character (e.g. ‘#’).

The POST to the authentication endpoint request returns a JWT token that is valid for ten hours. This means that your client component should re-authenticate before those ten hours has passed.

Subsequent calls to the platform should have both the X-Api key and an authorization header for the JWT token.