Access Using JWT

DreamFactory APIs can be consumed with just a JWT (token) from an authenticated session. JWT from an admin user's session will allow full access to the system. Non-admin users cannot consume any protected APIs using just a JWT. They will also require an API Key that tells the system what app the call is being made for. The system will use the API key to look up the role assigned to the user for that app, and limit access to what is allowed by that role.

Request:

GET https://foo.com/api/v2/system/user?session_token=abc.123.efg

• HTTP method: GET
• URL: https://foo.com/api/v2
• Service: system
• Resource: user
• Session token: abc.123.efg

Note: Session token can also be supplied using the X-DreamFactory-Session-Token request header.