How do I authenticate an API request?
Send your token in the Authorization header as a Bearer token with every request to https://www.skydb.net/api/v1/.
The SKYDB API uses Bearer tokens as defined in RFC 6750. Every request carries the header Authorization: Bearer, followed by a space and your token. The base address is https://www.skydb.net/api/v1/, and there is no separate sign-in step and no session to keep alive.
A request without a token returns HTTP 401 with the code api.access_token_required. An expired or revoked token returns HTTP 401 with the code auth.signin_required, the same answer an unknown token gets, so a wrong guess reveals nothing. If a token that used to work stops working, check its expiry date under My Settings, API.
Send the token in the header and never in the URL, because URLs end up in logs. Server-side code should set a descriptive User-Agent, since a generic one such as a bare curl agent can be refused at the network edge. The API reference has an Authorize button for trying a token in the browser, and the SKYDB API page shows a complete example request.
