Authentication
Authentication guide for using the Discloud API (how to obtain and safely use your API Token).
⚙️ How It Works
You generate a unique token linked to your account.
For every HTTP request include the header: api-token: YOUR_TOKEN_HERE.
The token authenticates and authorizes actions on behalf of your account (never share it).
Use the /user endpoint to quickly validate the token.
📤 Sending the Token
curl -X GET \
-H "api-token: $DISCLOUD_TOKEN" \
https://api.discloud.app/v2/userimport fetch from "node-fetch";
async function getCurrentUser() {
const res = await fetch("https://api.discloud.app/v2/user", {
headers: { "api-token": process.env.DISCLOUD_TOKEN },
});
if (!res.ok) {
console.error("Request failed:", res.status, await res.text());
return;
}
const data = await res.json();
console.log(data);
}// Install first: npm i discloud.app
const { discloud } = require("discloud.app");
discloud.login("DISCLOUD_API_TOKEN");
async function validateToken() {
try {
const user = await discloud.user.fetch();
console.log("Authenticated user:", user);
} catch (e) {
console.error("Invalid token or network error:", e.message);
}
}🛡 Securing the Token
Never commit your token (e.g. to Git). Store it in environment variables (.env, CI/CD secrets, etc.).
📌 Best practices:
Use environment variables instead of hard‑coding.
Rotate the token periodically (e.g. every 90 days).
Revoke and regenerate immediately if you suspect exposure.
Restrict who can access infrastructure where the variable is stored.
⚡ Quick Token Verification
Call /user right after setting the environment variable. If you get HTTP 200 with user data, authentication is working.
📚 Related Endpoints References
The operations below require the api-token header:
Last updated