Authentication

Authorization: Bearer <your_token>

The primary authentication method using secure tokens:

• JWT-based access tokens
• Short-lived token expiry
• Refresh token support
• Role-based permissions

{
  "did": "did:ixo:entity:<did-string>",
  "signature": "<signed-challenge>",
  "challenge": "<challenge-string>"
}

Decentralized identity authentication for:

• Oracle services
• Impact claims
• Verifiable credentials
• Domain operations

X-API-Key: <your_api_key>

Simplified authentication for:

• Development environments
• Limited-access endpoints
• Service-to-service calls
• Testing and integration

Best for web applications with user interaction

Ideal for service-to-service authentication

• Store tokens securely
• Use short expiration times
• Implement refresh flows
• Handle revocation

• Proper error responses
• Retry mechanisms
• Rate limit handling
• Logging and monitoring

• Verify DID ownership
• Check signature validity
• Validate challenge
• Monitor DID status