🔐 Bloquo API: Authentication

1. Overview

Authentication in the Bloquo API is handled via a Bearer Token, generated using your application's clientId and clientSecret. This token is required to access any protected API resources.

2. Authentication Endpoint

• Method: POST

• URL:
  https://staging-api.bloquo.io/api/v1/customer//users/authenticateApiClient

• Required Headers:
  None for this authentication call.

3. Request Body

Send the credentials in JSON format:

json
{
  "clientId": "your-client-id",
  "clientSecret": "your-client-secret"
}

4. Sample cURL Request

bash
curl --location 'https://staging-api.bloquo.io/api/v1/customer//users/authenticateApiClient' \
--data '{
  "clientId": "your-client-id",
  "clientSecret": "your-client-secret"
}'

5. Successful Response Example

json
{
  "status": true,
  "statusCode": 200,
  "result": {
    "accessToken": "eyJraWQiOiJLY1NFWGF1T21SVzBFY...etc",
    "expiresIn": 3600,
    "tokenType": "Bearer"
  },
  "message": null
}

• accessToken: the authentication token.

• expiresIn: expiration time in seconds (e.g., 3600 = 1 hour).

• tokenType: always Bearer.

6. Using the Token

Once you receive the accessToken, include it in all future API requests using the Authorization header:

h
Authorization: Bearer YOUR_TOKEN_HERE

7. Frequently Asked Questions (FAQ)

❓ What are clientId and clientSecret?

They are credentials provided by Bloquo to authorize your application. If you don’t have them, please contact Bloquo’s support team.

❓ Where do I use the token in other API calls?

Include the token in the Authorization header, like so:

http
Authorization: Bearer eyJraWQ...etc

❓ Does the token expire?

Yes. The expiresIn field indicates how long the token is valid (usually 3600 seconds = 1 hour). After that, you'll need to request a new one.

❓ Can I reuse the same token for different endpoints?

Yes, as long as the token is still valid. Once expired, re-authentication is required.

❓ What does "status": true mean in the response?

It means the authentication was successful.

❓ What environment is this URL for?

The provided URL (staging-api.bloquo.io) is for the staging environment. Contact the Bloquo team to get the production endpoint and credentials.

❓ Can I use this URL in production?

No. This is a staging (test) URL. Production requires a separate endpoint and credentials.

For further questions about the Bloquo API authentication process, contact our technical team or check the official documentation.