Partners will be provided with an API key during onboarding, which can be exchanged for a token. Tokens are valid for 1 hour. See the PartnerAuthIngressService (gRPC) documentation for endpoints to exchange and refresh tokens.
All endpoints require the authorization bearer token; endpoints scoped to a company or an employee also take identity headers:
| Header | Value |
|---|---|
Authorization | Bearer <partner_jwt> |
X-Identity-Uuid | company_uuid | employee_uuid |
X-Identity-Type | COMPANY | EMPLOYEE |