Client Tokens

A Client Token is a key that is used to act as a company. Depending on what action is to be performed a Client Token may or may not be required as some actions are heavily tied to a company and others are more administrative from the perspective of the ERP system operator.

These Client Token keys are designed for the purpose of solving key distribution as a security measure as one doesnt want to distribute a single master key to on-prem systems. Due to this keys can be set to have a scoped life time. They can be permanent keys in those cases its a valid option or temporary set to expire at a certain datetime if specified upon when requesting the Client Token. If need be they can be revoked before expiry.

The default behaviour is no expiry date on Client Token unless other specified.

The API-key holder is the party responsible for fetching and managing Client Token after the fact that they have been created.

InExchange is responsible for generating the Client Token and correlating them to specific companies registered by API-key holders.

Client Token are supplied as a header in each API request that is specified to require it.

Snippet

POST /v1/api/documents HTTP/1.1
Host: testapi.inexchange.se
ClientToken: --CLIENT TOKEN HERE--