Authentication
Securely authenticate with Limim's APIs using API keys or OAuth2 tokens.
API Keys
Use API keys for server-to-server requests. Generate keys in your account settings.
curl -X GET "https://api.limim.com/v1/resources"
-H "Authorization: Bearer API_KEY_HERE"
-H "Content-Type: application/json"
API keys must be stored securely, never exposed in client code.
OAuth2
Obtain access tokens through /auth/token using client credentials grant type.
Request Token
POST /auth/token
Content-Type: application/x-www-form-urlencoded
grant_type=client_credentials
&client_id=CLIENT_ID
&client_secret=SECRET
Response
{
"access_token": "TOKEN_HERE",
"token_type": "Bearer",
"expires_in": 3600
}
JWT Authentication
Use JSON Web Tokens for user-specific access. Tokens are obtained through the authentication flow and expire after 1 hour by default.
Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...
Try Authentication
CURL Example
curl -X GET https://api.limim.com/v1/resources \
-H "Authorization: Bearer YOUR_TOKEN_HERE"
JavaScript Example
fetch('https://api.limim.com/v1/resources', {
headers: {
'Authorization': 'Bearer YOUR_TOKEN'
}
})
.then(res => res.json())
Security Best Practices
- Rotate credentials monthly
- Never hardcode tokens in client-side code
- Use mutual TLS for high-security environments
- Always use HTTPS encryption