Authentication

TapAce authenticates requests with API keys. Create and revoke them in the dashboard under Developers → API keys.

Send your key

Put the key in the Authorization header as a Bearer token:

Authorization: Bearer tapace_live_xxxxxxxxxxxx

The key also decides the environment. Keys starting with tapace_test_ work in test mode and keys starting with tapace_live_ work in live mode. See Test and live.

Keep API keys on your server. Never put them in a website, mobile app or anything else a customer can download.

Check a key

Call GET /v1/me to see which organization and environment a key belongs to:

curl https://api.tapace.lk/v1/me \
  -H "Authorization: Bearer tapace_test_xxxxxxxxxxxx"

{
  "organizationId": "org_2tQpA8kLmN3vX",
  "environment": "test"
}

Failed authentication

A missing, malformed, unknown or revoked key gets the same 401 response, so a key’s status can’t be probed:

{
  "error": {
    "code": "invalid_api_key",
    "message": "Invalid API key."
  },
  "requestId": "req_8f3a2c1d9e7b6a54"
}

Getting started

Basics

Guides

API keys

Passes

Templates

Assets

Authentication

Send your key

Check a key

Failed authentication

​Send your key

​Check a key

​Failed authentication

Send your key

Check a key

Failed authentication