Authentication and authorization

Overview

---

Request

Check authorization method
Method type	GET
URL or endpoint	/api/vversion/init/app
Query string	URL (web), contentId (iOS, Android)

Header	Description
appId	The ID of your application.
auth	The authorization header.
content-type	The content-type of the response.
accept	The accept header.
referrer	The referrer header.
origin	The origin header.
x-api-key	The API key of your app, which is generated in the API section on your Tonos admin account.
biskoId	The Bisko ID of your application.

iOS Headers
deviceType	The device type your application is suited towards.
iosversion	The iOS version of the application.
bundleId	The bundle ID of the application.

Android Headers
deviceType	The device type your application is suited towards.
androidversion	The iOS version of the application.
package name	The package name of the application.

Response

If the service is successful, the server sends back an HTTP 200 response.

JSON

{
  "statusCode": 200,
  "success": true,
  "errors": {},
  "message": null,
  "data": {
    "ais": {
      "clientId": "tonos_client_web",
      "scopes": "openid email profile offline_access tonos_identity",
      "redirectUri": "portali.gjirafa.dev",
      "responseType": "id_token token",
      "authority": "https://account.gjirafa.tech/"
    },
    "b": 180431,
    "c": true
  }
}

Field Name	Type	Description
data	Object	Returns the data of the response as an object.
ais	Object	An object that represents the identity provider.
clientId	string	The client ID.
scopes	string	the scopes of the identity provider.
redirectUri	string	The redirect URI of the identity provider.
responseType	string	The response type.
authority	string	The authority that sent the request.
b	int	The bisko ID.
c	boolean	Indicates whether the client is logged in.