Skip to main content
POST
/
tokens
Tokens
curl --request POST \
  --url https://demand.researchdesk.com/tokens \
  --header 'Authorization: <api-key>' \
  --header 'Content-Type: application/json' \
  --data '{
  "email": "{{email}}",
  "password": "{{password}}"
}'
{
  "token": "eyJraWQiOiJuNG93MStFaVdQeThpSVJLR2o1YXNvaURJTmNWNnJPaG9UWDNrXC9JN05Vaz0iLCJhbGciOiJSUzI1NiJ9.eyJzdWIiOiIzNDQ4OTQ0OC03MDgxLTcwYjItN2NkZC00MDEzZWU5YjkzMmQiLCJpc3MiOiJodHRwczpcL1wvY29nbml0by1pZHAudXMtZWFzdC0xLmFtYXpvbmF3cy5jb21cL3VzLWVhc3QtMV80UEVLNUpncHgiLCJjbGllbnRfaWQiOiI0c2JoczN1dDMxaTE5b2lpY2lmNmlocGpuMSIsIm9yaWdpbl9qdGkiOiIyMzJjYmQ3My05YmEzLTQyM2MtYTU5YS1lYmJmMDM3MjJhZGIiLCJldmVudF9pZCI6IjA0YWI2MTEwLTA3ZGEtNDZmYy04N2MwLTY0ODAyYzgzNzZmMyIsInRva2VuX3VzZSI6ImFjY2VzcyIsInNjb3BlIjoiYXdzLmNvZ25pdG8uc2lnbmluLnVzZXIuYWRtaW4iLCJhdXRoX3RpbWUiOjE3Mzc0OTYxNjQsImV4cCI6MTczNzUwNjk2NCwiaWF0IjoxNzM3NDk2MTY0LCJqdGkiOiIxOTlhM2M0YS0yYTJkLTQxMjgtOWQ4Mi01YmQ3YjFjMGYwZTAiLCJ1c2VybmFtZSI6IjM0NDg5NDQ4LTcwODEtNzBiMi03Y2RkLTQwMTNlZTliOTMyZCJ9.gFI515igfGK9wNijA0fI-usEyaDatdJG5GZK0_byZoPWGQ9VoViaU1TZ_CtyI-rG6DN_-DJ3IBaUtrXbRZb8LIGRs8bvzKRdSyE3fRAsYht7NlczRRVH2w0TkgRX_8O8FZWERbOT2d3FfS_WVh5TG15QZGXmJBaTwTjKkxtQ5WZg_QGIocXfFA5j5vFOmKXEFsp_r7VzDA12BQBGaSq99li0aGLlROGY-svzskS_HUzlP3zRGuaaKv1vte0DUqC-4FMADhnSqw0pFvJcU6W5F3snuqRaHyKYD0g5Q3UBYm4fgBw-CHXz8jzB43yHU_I_X70OlOFWDjFwoONwX8-HXQ",
  "expires": "2025-01-22 00:49:23.552399"
}
Rate limit: 5 requests/hour, per email address Email and password combinations are required to generate tokens which are used for authorizing subsequent API calls. Tokens are accepted for 12 hours after generation; it is suggested to store the token in a cookie governed by timestamp logic, although it is acceptable to attempt API actions to determine token validity and re-authenticate as necessary. The token is passed as Authorization in the header for all subsequent calls. Email addresses are unique and must be associated with an active user object.

Authorizations

​
Authorization
string
header
required

Authentication token to be sent directly in the Authorization header (no '' prefix).

Body

application/json
​
email
string
​
password
string<password>

Response

200 - application/json

Tokens

​
token
string
​
expires
string
⌘I