/authenticate [POST]

ThoughtFarmer REST API Method: /authenticate

Attempts to authenticate a user based on the passed in parameters. If successful, it returns a token that can be passed into the other API calls to represent the authenticated user.

Response Formats:

HTTP Method(s):
Requires Authentication:
false (no token required), but the user attempting to authenticate must be a ThoughtFarmer administrator.


Parameter Type Description 
username string Required, if an Authorization header is not set. The username of the user to authenticate
password string Required, if an Authorization header is not set. The password of the user to authenticate
applicationId string Required. A valid application id that allows the client to make calls against the API, This can be found in the Admin Panel --> Configuration Settings page. Look for api.applicationCodes.
When ThoughtFarmer is configured to use an external login provider, the password and username parameter MUST be omitted, and an authorization header can be set with a REST API authentication token instead. A REST API authentication token can be generated in the admin panel, on the API Token page.

Response Status Codes:
200 - Authentication successful
401 - Error validating user or application id
Example request
HEADERS Content-Type: application/json
    "username": "user",
    "password": "password",
    "applicationId:" 123456
Example request 2: Do not send username or password if you are using an Authorization header. If you do they will take precedence and the Authorization header will be ignored.
HEADERS Authorization: **********    (use your REST API token from the API token admin page)
Content-Type: application/json
    "applicationId:" 123456